Analysis
-
max time kernel
147s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
11/01/2024, 06:42
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
52cfea8d79841fd2344a1669180f06c1.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
52cfea8d79841fd2344a1669180f06c1.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
52cfea8d79841fd2344a1669180f06c1.exe
-
Size
227KB
-
MD5
52cfea8d79841fd2344a1669180f06c1
-
SHA1
c1689e23702597a4e84d66238f2a3f25d59e7763
-
SHA256
152adedf4c4dd6ec563173272f32a4f5226630a9d54b854e6806426e1ba9744e
-
SHA512
ac82bda0931c9ac7d8113277eb45cdd7feb43d419f075694f6f336d0ecf7f3bc4266dc2834d6fbf5e260e552ba85d0030a2abca14c696d0022f020c20f3f2816
-
SSDEEP
3072:AuGStlMcA7whQ0V3KqxTatT45sXtM4i8alYry3toNkq7gU5iZSTs:0SthxqMKwTeksM4i8alYrKiNK
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2900 4772 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\52cfea8d79841fd2344a1669180f06c1.exe"C:\Users\Admin\AppData\Local\Temp\52cfea8d79841fd2344a1669180f06c1.exe"1⤵PID:4772
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4772 -s 2922⤵
- Program crash
PID:2900
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4772 -ip 47721⤵PID:404