Analysis
-
max time kernel
149s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
08/01/2024, 15:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4bbe5b5820b1f5ae3189de7b1872ab38.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
4bbe5b5820b1f5ae3189de7b1872ab38.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
4bbe5b5820b1f5ae3189de7b1872ab38.exe
-
Size
3.4MB
-
MD5
4bbe5b5820b1f5ae3189de7b1872ab38
-
SHA1
305be59c2d275c105694c543f5a5c95341bc096c
-
SHA256
79cc75b81fab6bcbc8ff90d321fb8ed4d8d24c00b504c38786269f7d9ee71980
-
SHA512
f1c4e19cdb8f53d3b89557dc8ff0f2bc3d63938473117e2c63bd21be85e7c1ce98e2e7bb3f8888e1b62dcce7acee1a1700f176830aadd937df573a448d08054d
-
SSDEEP
98304:/L3gSe61N+/Z/Rv6pOFj06f/ZzSjLUbfHmwgFc:Tw361Nmv6py06f/pSeL
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2704 116 WerFault.exe 15
Processes
-
C:\Users\Admin\AppData\Local\Temp\4bbe5b5820b1f5ae3189de7b1872ab38.exe"C:\Users\Admin\AppData\Local\Temp\4bbe5b5820b1f5ae3189de7b1872ab38.exe"1⤵PID:116
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 116 -s 2882⤵
- Program crash
PID:2704
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 116 -ip 1161⤵PID:5044