Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
12-01-2024 02:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
552f9b8e1943bad18fcc5331bbf3d073.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
552f9b8e1943bad18fcc5331bbf3d073.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
552f9b8e1943bad18fcc5331bbf3d073.exe
-
Size
141KB
-
MD5
552f9b8e1943bad18fcc5331bbf3d073
-
SHA1
f6910b0f7bd2a1fd93870f55c2a0aa58b3336a28
-
SHA256
6956acb924d690bf73a9d02d78b7b08203bcc7ff67a79ac8521139d979fcccda
-
SHA512
8d931713dd054ae62c67f492a1aee0efcb1a0594e0169174f12fd8a468029cee8a5eccac938e42bb9dffafd72df3c5698c8dcf754aed05b8ccb8be25846a6c84
-
SSDEEP
3072:lbCrnPN1fBkt6/1PkY+8a6ggJKuAYiC1tkmj6ET:5knF1fSt6/1X+JxgA5CtkWf
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 220 3980 WerFault.exe 55
Processes
-
C:\Users\Admin\AppData\Local\Temp\552f9b8e1943bad18fcc5331bbf3d073.exe"C:\Users\Admin\AppData\Local\Temp\552f9b8e1943bad18fcc5331bbf3d073.exe"1⤵PID:3980
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3980 -s 2642⤵
- Program crash
PID:220
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 356 -p 3980 -ip 39801⤵PID:4720