Analysis
-
max time kernel
141s -
max time network
200s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
10-01-2024 12:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5090d53a9b50af04992721cce6745339.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
5090d53a9b50af04992721cce6745339.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
5090d53a9b50af04992721cce6745339.exe
-
Size
385KB
-
MD5
5090d53a9b50af04992721cce6745339
-
SHA1
c3f6d46620e7e2f9e19693cbbfba4d9bc84bdbdf
-
SHA256
2529dbeea85738c758a58df3cbfa89641180c477a6b639db4fdab3918798415c
-
SHA512
97bd17c978467a0425b0c07df1e0e27f88464189640ee104957b695347e561a1687c340500fc6d2064258c2f2b7bbc5bc4dbd1d588aa7be8b687f7495a4c203d
-
SSDEEP
12288:oz8J4lcJ/lTn+VTLhmpyewakmnMBk70VV19iVxi:WolJ/BnWhmpjX3z0VVAi
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2348 4668 WerFault.exe 89
Processes
-
C:\Users\Admin\AppData\Local\Temp\5090d53a9b50af04992721cce6745339.exe"C:\Users\Admin\AppData\Local\Temp\5090d53a9b50af04992721cce6745339.exe"1⤵PID:4668
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4668 -s 3122⤵
- Program crash
PID:2348
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 4668 -ip 46681⤵PID:3392