Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
08/01/2024, 11:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4b4ee5d1854baa89edfcd336198fdc9a.exe
Resource
win7-20231129-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
4b4ee5d1854baa89edfcd336198fdc9a.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
4b4ee5d1854baa89edfcd336198fdc9a.exe
-
Size
172KB
-
MD5
4b4ee5d1854baa89edfcd336198fdc9a
-
SHA1
131d75f4c06893aaec18cb8588a54904513c11f8
-
SHA256
f80fb0b3034abf84e4de754e538f92e9db34deb0211d7d0241d30e1fe2801b6d
-
SHA512
aea5884ac66d008984669739fe93afd18a3f845838dfec7c38ac703776242f829da390b27288e3d72c3055f6a119e11db2654670dc3630c27ce7306a23cac00e
-
SSDEEP
3072:4sxAj81b8klWl5dmN7VsmjMM4OgVJYasN336MdMfLirkQW0/nyypF2:4saG8kPLGThVJwqqULirkT01k
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 512 3592 WerFault.exe 56
Processes
-
C:\Users\Admin\AppData\Local\Temp\4b4ee5d1854baa89edfcd336198fdc9a.exe"C:\Users\Admin\AppData\Local\Temp\4b4ee5d1854baa89edfcd336198fdc9a.exe"1⤵PID:3592
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3592 -s 2642⤵
- Program crash
PID:512
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3592 -ip 35921⤵PID:876