Analysis
- max time kernel
146s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
07/01/2024, 19:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a2d5f9d95aabd2739f5776aeda15a98c.exe
Resource
win7-20231215-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
a2d5f9d95aabd2739f5776aeda15a98c.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
- Target a2d5f9d95aabd2739f5776aeda15a98c.exe
- Size 390KB
- Sample240107-x3hhpadcd3
- SHA256 a05e6c5b0e6372ce2dcb9c33df12ede35d9726f72996e9c34c9801ddc53deab5
- MD5 a2d5f9d95aabd2739f5776aeda15a98c
- SHA1 ebb5aab5b2708ac2990a2b6026fbd69d99d40379
- SHA512 06d17f96dfeb0ead985534f786af6dec3ffaa5f26782d90d00773eaacee9e2820ff68d583214eb2239935f5024c0e824ca0595ac5a0f8b8e9fcec7dc5c1d1cf4
- SSDEEP 6144:kqwD+X1xQatU+1CEJp4XEt8l3aw9Y6zfJvkeitTDYWMtrDVmCfNuI2RINhoDPnr:GO1xm+QoK0t4K3gCTDYWGrYzt+NST
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4836 3400 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\a2d5f9d95aabd2739f5776aeda15a98c.exe"C:\Users\Admin\AppData\Local\Temp\a2d5f9d95aabd2739f5776aeda15a98c.exe"1⤵PID:3400
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3400 -s 5642⤵
- Program crash
PID:4836
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3400 -ip 34001⤵PID:492