Analysis
-
max time kernel
139s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
17/01/2024, 20:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
637c1fe709d724c7ea84764f36449ebe.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
637c1fe709d724c7ea84764f36449ebe.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
637c1fe709d724c7ea84764f36449ebe.exe
-
Size
371KB
-
MD5
637c1fe709d724c7ea84764f36449ebe
-
SHA1
c28a33e1dabadb66568e446bdb3817252179a7e5
-
SHA256
15da9df723590d52f3eca5234c2ef14db68f6bf64ad3d6f21ce79524c8382469
-
SHA512
455e124894d59182caaf11cf104c187bd44d427d58427cb83cfdc62aab467fbe745b42b5cc2a97c3e388726a7f94944185cbd8ef5a5e07abcd5da3985a35ba8c
-
SSDEEP
6144:GpM2HOZAuajaBuq0gyo6mU7XVZJWMqC2npA/WdDSrOL9cP5f:IM2OZBaGuqyr7nAMJZedurpN
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3932 4732 WerFault.exe 61
Processes
-
C:\Users\Admin\AppData\Local\Temp\637c1fe709d724c7ea84764f36449ebe.exe"C:\Users\Admin\AppData\Local\Temp\637c1fe709d724c7ea84764f36449ebe.exe"1⤵PID:4732
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4732 -s 3722⤵
- Program crash
PID:3932
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4732 -ip 47321⤵PID:2016