Analysis
-
max time kernel
145s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
12/01/2024, 04:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5578775379277deff128a14c0e3ff7b2.exe
Resource
win7-20231129-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
5578775379277deff128a14c0e3ff7b2.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
5578775379277deff128a14c0e3ff7b2.exe
-
Size
626KB
-
MD5
5578775379277deff128a14c0e3ff7b2
-
SHA1
124f255f80c809194085b4ffa1c77b8674533400
-
SHA256
0bd48032a06c6bc8cb1375220bc2f24293b977f14957ad58dbfe36eb63b8397a
-
SHA512
537ca8784d419bd0aff951db57d5bfced771dc6ea8dedd61ae8113ca1c350c4914e64b22a2e672e41d774fda2cbe4c2c40b90e25cf12baa2cbfdd6b4ffb3bfa4
-
SSDEEP
12288:SsLLKhoq8/5s2IyV2G0hRpS8sXdRVXdKtqmRO8s3AMe:3c8G2IyAFq8sXd0t8xe
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 2356 3436 WerFault.exe 81 5132 3436 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\5578775379277deff128a14c0e3ff7b2.exe"C:\Users\Admin\AppData\Local\Temp\5578775379277deff128a14c0e3ff7b2.exe"1⤵PID:3436
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3436 -s 5482⤵
- Program crash
PID:2356
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3436 -s 5482⤵
- Program crash
PID:5132
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3436 -ip 34361⤵PID:4520
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3436 -ip 34361⤵PID:5264