Analysis
-
max time kernel
144s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
13-01-2024 07:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
584a85238b3041b073f981deb95ffcc0.exe
Resource
win7-20231129-en
windows7-x64
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
584a85238b3041b073f981deb95ffcc0.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
584a85238b3041b073f981deb95ffcc0.exe
-
Size
440KB
-
MD5
584a85238b3041b073f981deb95ffcc0
-
SHA1
b022538715c332be6cfa44d7ea37809c70dd3c40
-
SHA256
dfaf36beb50196504e945133b64b0d294af35bcced5856f4dfb367ca1e36b4a1
-
SHA512
61595b5d1d88a5390d804587c99dcefd53dd07fad3bad025d09dacd33a2030fdd8ddff9461f94939791aff1c55c3380002dcb113bba3f449ef07a1bf9348dd6e
-
SSDEEP
6144:QW4w9FbaBFFpjBhJlCHydIlavBWpcyMDaaDgx+roTuRiMv14j9d6+NO2IZETEeNo:N9QFBwHydIGy5ogwr1iMv14RdvOPuTL
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3632 2512 WerFault.exe 63
Processes
-
C:\Users\Admin\AppData\Local\Temp\584a85238b3041b073f981deb95ffcc0.exe"C:\Users\Admin\AppData\Local\Temp\584a85238b3041b073f981deb95ffcc0.exe"1⤵PID:2512
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2512 -s 5002⤵
- Program crash
PID:3632
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2512 -ip 25121⤵PID:3680