Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
10/01/2024, 15:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
50dfb0807ea415f1715760319bbc6f34.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
50dfb0807ea415f1715760319bbc6f34.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
50dfb0807ea415f1715760319bbc6f34.exe
-
Size
502KB
-
MD5
50dfb0807ea415f1715760319bbc6f34
-
SHA1
b9b3d47f03bea6b886e2c48b63c7cf5ddebe9215
-
SHA256
dc28fb7b3e1d4d23646e4b964b9958b7f84d0c9d68645c871d86a024b23e06c5
-
SHA512
b55e6b4cb170802a281d067a1aa74d2b1223f2a9abc99d082a11a6b2f50ff810e5c98156e363b3570ed23f8b43ac7fda0c0237a2f7f50ba1bd0c2a2b4b54a26c
-
SSDEEP
12288:alaWg8xylOvMIb9huOBpswPqiblfAqYJasdd+:aupOvTlpswisfr
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 3576 4080 WerFault.exe 27 2492 4080 WerFault.exe 27
Processes
-
C:\Users\Admin\AppData\Local\Temp\50dfb0807ea415f1715760319bbc6f34.exe"C:\Users\Admin\AppData\Local\Temp\50dfb0807ea415f1715760319bbc6f34.exe"1⤵PID:4080
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4080 -s 5722⤵
- Program crash
PID:3576
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4080 -s 5602⤵
- Program crash
PID:2492
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4080 -ip 40801⤵PID:2716
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4080 -ip 40801⤵PID:3508