Analysis
-
max time kernel
143s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
16-01-2024 16:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
604d424543bc2eb56442f007b79c3ce4.exe
Resource
win7-20231129-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
604d424543bc2eb56442f007b79c3ce4.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
604d424543bc2eb56442f007b79c3ce4.exe
-
Size
1.8MB
-
MD5
604d424543bc2eb56442f007b79c3ce4
-
SHA1
ae8b2394ff498823163346968de336ecf51f76d6
-
SHA256
c6a86f2c27b1250d7dbdabeedfa5edd5e6b3baf1d66955fbe08dec8821864103
-
SHA512
2f01840ebb5094cc83e811f886438dbfcd689c526bed3727dab5525fa7c15eb77c20137e2b67212da2c7cae82e27d19f8c53d50e624cef443b9399a9a211255b
-
SSDEEP
49152:eqxKXBJASciVHSLKi6YwkKrjjFETxNPV:eUKXX5chu91r1up
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 632 1004 WerFault.exe 604d424543bc2eb56442f007b79c3ce4.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\604d424543bc2eb56442f007b79c3ce4.exe"C:\Users\Admin\AppData\Local\Temp\604d424543bc2eb56442f007b79c3ce4.exe"1⤵PID:1004
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1004 -s 2802⤵
- Program crash
PID:632
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1004 -ip 10041⤵PID:2324