Analysis
-
max time kernel
145s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
13/01/2024, 23:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
59a4f857c9482baa0aec264fc21f96e7.exe
Resource
win7-20231215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
59a4f857c9482baa0aec264fc21f96e7.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
59a4f857c9482baa0aec264fc21f96e7.exe
-
Size
164KB
-
MD5
59a4f857c9482baa0aec264fc21f96e7
-
SHA1
0c4a70c3c642e558f3a63aa264139a39ed3ad1c2
-
SHA256
dd533c3705020296f2524cc10b67b7c36c1b166c74d875c01b9d0c8e63a8d139
-
SHA512
62a6c5bbddcf2b2ff0c5085c54aa5843408f95e6aca4e715dd4100fb1d3a9bafab63c38eecccfa51095c8392df714cc00e007e83c11caa9529816b97fc927f69
-
SSDEEP
3072:CyIkSC1ov9IDUInFMSGM0DLD+EZxLAQ+AIEH0Fma7fkzaMYWMBvdgn:2kZamDUInhGM0DLD+wLAQ+AIEH0Fma7j
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4964 4824 WerFault.exe 33
Processes
-
C:\Users\Admin\AppData\Local\Temp\59a4f857c9482baa0aec264fc21f96e7.exe"C:\Users\Admin\AppData\Local\Temp\59a4f857c9482baa0aec264fc21f96e7.exe"1⤵PID:4824
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4824 -s 2362⤵
- Program crash
PID:4964
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 4824 -ip 48241⤵PID:3944