Analysis
- max time kernel
148s - max time network
100s - platform
windows10-2004_x64 - resource
win10v2004-20231222-en - resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system - submitted
08/01/2024, 04:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4a6d4f7b65b8667f798d8c3565efc6e0.exe
Resource
win7-20231215-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
4a6d4f7b65b8667f798d8c3565efc6e0.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
- Target 4a6d4f7b65b8667f798d8c3565efc6e0.exe
- Size 270KB
- Sample240108-ey932acac9
- SHA256 78cc54b9ec7155a7690d095129938c4a91010760fd92ff29d197ef5822060899
- MD5 4a6d4f7b65b8667f798d8c3565efc6e0
- SHA1 bd19d56fc8bffbc3ebff4bc62f2f951307438047
- SHA512 e8b5b37bbbfd2d8f8244b53fcd1040bc4921a4618373b90e22bdfd718788bc3738f02a8b27d2ff582ae384f88882e1bc244cf3759ed357167d7da39efbf59299
- SSDEEP 6144:21tSQAkCpKTln0kFoaDfvbWlOG3UJHJrH1W7c:2FmkaKfvbjHV1W7c
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 228 552 WerFault.exe 18
Processes
-
C:\Users\Admin\AppData\Local\Temp\4a6d4f7b65b8667f798d8c3565efc6e0.exe"C:\Users\Admin\AppData\Local\Temp\4a6d4f7b65b8667f798d8c3565efc6e0.exe"1⤵PID:552
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 552 -s 2842⤵
- Program crash
PID:228
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 552 -ip 5521⤵PID:1612