Analysis
-
max time kernel
144s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
17/01/2024, 19:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6361cbbb42c7718449921d907217d1c5.exe
Resource
win7-20231129-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
6361cbbb42c7718449921d907217d1c5.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
6361cbbb42c7718449921d907217d1c5.exe
-
Size
184KB
-
MD5
6361cbbb42c7718449921d907217d1c5
-
SHA1
febe28483af56350bf3026c661355d6fee9f1e29
-
SHA256
dc13bb9535a779932f447d04e60c9ad65660cabebb93782eb4727af815bf475f
-
SHA512
4509330aac40e38cac6d1e12156ed6710313c6438e200c811d86b4a95f4b2290781bbb0d72247e1947bfdb12ea6a63ab5ef33b668f07673b75a2f11140e63c88
-
SSDEEP
3072:LG2aompThrHYnxC8MhShA8wM3slMxvLlsGvxSv/HZNlPvpF5:LG7o8DYnvMchA8z5eZNlPvpF
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2108 2168 WerFault.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\6361cbbb42c7718449921d907217d1c5.exe"C:\Users\Admin\AppData\Local\Temp\6361cbbb42c7718449921d907217d1c5.exe"1⤵PID:2168
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2168 -s 2282⤵
- Program crash
PID:2108
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 2168 -ip 21681⤵PID:4796