Analysis
-
max time kernel
143s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
11/01/2024, 07:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
52e713aa9c4c9c8b718237724606d0b8.exe
Resource
win7-20231215-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
52e713aa9c4c9c8b718237724606d0b8.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
52e713aa9c4c9c8b718237724606d0b8.exe
-
Size
170KB
-
MD5
52e713aa9c4c9c8b718237724606d0b8
-
SHA1
ced48258a4a7cb222703be37f4fb9bd33031d5df
-
SHA256
d54f44fd33420ab8fbc53709a7fed3e9a1701a6e83e4f322b372ddacfb4c35dc
-
SHA512
19d196af57ebd22ba99fb3f0505f994258471f60c3eee88c1770f6b1db0de8352cda7fb552abe87a5322b80cf1647bd362f550213f46a52ec16aa5909a203192
-
SSDEEP
3072:osUkgsRKe4cps3i6zsZzAgzsoQGSNXbxnhsF+fX5KX/qnpdwbP:9UJ+Ka6dsNB1QnbxhsmkX/s4
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 2592 3712 WerFault.exe 88 2280 3712 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\52e713aa9c4c9c8b718237724606d0b8.exe"C:\Users\Admin\AppData\Local\Temp\52e713aa9c4c9c8b718237724606d0b8.exe"1⤵PID:3712
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3712 -s 5522⤵
- Program crash
PID:2592
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3712 -s 5682⤵
- Program crash
PID:2280
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 3712 -ip 37121⤵PID:384
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 3712 -ip 37121⤵PID:3156