Analysis
-
max time kernel
149s -
max time network
134s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
12-01-2024 09:54
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
56234b662006cce7861981249b109c71.exe
Resource
win7-20231215-en
windows7-x64
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
56234b662006cce7861981249b109c71.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
56234b662006cce7861981249b109c71.exe
-
Size
392KB
-
MD5
56234b662006cce7861981249b109c71
-
SHA1
f083591d87de9c90d3f3b9654f8a0437326476ce
-
SHA256
574694323613ac26fde108493cd37167364abae84cfbd7fb7744a9feba46658e
-
SHA512
2d2b71220b01cc85f8d09b480cd9eea0e0c92d2d0b580cd6645c0f1faba9f33f1ec26ff6cca7c6747292603709d7a2a1d8c906329eeb45f9192327c1449db5d7
-
SSDEEP
6144:6F6C8P1wG0fljKQIZhzc7HVHtf5vuyh+ajZCsuAMXMzFHCD/yr07oAH4a6DI:6w/ApUvsfRh+ajZCBAMXoUK0VHz68
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2336 3052 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\56234b662006cce7861981249b109c71.exe"C:\Users\Admin\AppData\Local\Temp\56234b662006cce7861981249b109c71.exe"1⤵PID:3052
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3052 -s 3762⤵
- Program crash
PID:2336
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 3052 -ip 30521⤵PID:4456