Analysis
-
max time kernel
141s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
10/01/2024, 08:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
501a9607c1cce7f17e78e9efbd881b84.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
501a9607c1cce7f17e78e9efbd881b84.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
501a9607c1cce7f17e78e9efbd881b84.exe
-
Size
21KB
-
MD5
501a9607c1cce7f17e78e9efbd881b84
-
SHA1
3e2825d3bef55bf64b789f80529ec9a865ff247f
-
SHA256
f36d410fb84002376b3fd62a8c6bebda0a91857a10d568d383a3bbe3feac452d
-
SHA512
34f1b91a71bce181797ab0378444cec24ebe685ef66c1f5a63b5fa2b6afb255b5fd0fc5fe5efcb8d0cbcb2d75e5392d4cefe997b519e899c10eddcecc31de6d7
-
SSDEEP
384:zqvrgvOIUu5CBnIJVDCkVO4O/spNa4kOn5h8h9lrlUm0aNUawxYM5iWMZ:zqvrHTPB0dzFOELa4kI5hexljXN25IZ
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 224 4420 WerFault.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\501a9607c1cce7f17e78e9efbd881b84.exe"C:\Users\Admin\AppData\Local\Temp\501a9607c1cce7f17e78e9efbd881b84.exe"1⤵PID:4420
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4420 -s 4282⤵
- Program crash
PID:224
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4420 -ip 44201⤵PID:4500