Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20231222-en - resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system - submitted
15/01/2024, 16:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5d8bc71288534d516fbe7a2df5493159.exe
Resource
win7-20231215-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
5d8bc71288534d516fbe7a2df5493159.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
- Target 5d8bc71288534d516fbe7a2df5493159.exe
- Size 149KB
- Sample240115-tw2ffacbe4
- SHA256 407c8d7c3b06000b02bbd04f88bf3ceff909b2d32e2832708481a055d828bb74
- MD5 5d8bc71288534d516fbe7a2df5493159
- SHA1 5b2d7e27c7db236d52c558ab227e55f59aed3fbc
- SHA512 1d3c2563957f3fc97bd60b2da86158cc20064c780efc1ae781012409165420f2af39ef14b91ab1aef114baf57545f6cc1fd84a5f31e68a0a8ef76adbbf8a619a
- SSDEEP 3072:P2SyW1Q6hQBcKxFjojOdcFjOn60B4JMGr8FHfBul5RLO2:P/yI1K7Fjoycjbj5r8FZERX
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 3376 220 WerFault.exe 16
Processes
-
C:\Users\Admin\AppData\Local\Temp\5d8bc71288534d516fbe7a2df5493159.exe"C:\Users\Admin\AppData\Local\Temp\5d8bc71288534d516fbe7a2df5493159.exe"1⤵PID:220
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 220 -s 3402⤵
- Program crash
PID:3376
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 220 -ip 2201⤵PID:4800