Analysis
- max time kernel
149s - max time network
143s - platform
windows10-2004_x64 - resource
win10v2004-20231222-en - resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system - submitted
09/01/2024, 04:11
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4d4d5f37b49144bc0884310dd3da3e23.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
4d4d5f37b49144bc0884310dd3da3e23.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
- Target 4d4d5f37b49144bc0884310dd3da3e23.exe
- Size 53KB
- Sample240109-eryresehgr
- SHA256 33f03d68fe0768e38992f59c7831e80e92597ea5464d61f42a9cf79a93cd0031
- MD5 4d4d5f37b49144bc0884310dd3da3e23
- SHA1 74ce23a4bccc0200ea63e75741394d48dbefcdc5
- SHA512 537af4ee92af6f49902d4390494a7c9e1793ccccc679330bff9ec75a27ccb88f5d2ee1d7599dd28fbce969fb4dd3951f9822e6479607fe016d16d31f881b9399
- SSDEEP 768:UPrOyA8SsDDmaMLqerApEQJogc2Il1Krv6xbPRc0G9RLGo9fWXKABNTLL57xmpTq:z8NWLG3pnI3K761P200D2yp
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4032 5060 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\4d4d5f37b49144bc0884310dd3da3e23.exe"C:\Users\Admin\AppData\Local\Temp\4d4d5f37b49144bc0884310dd3da3e23.exe"1⤵PID:5060
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5060 -s 2882⤵
- Program crash
PID:4032
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 5060 -ip 50601⤵PID:3772