Analysis
-
max time kernel
145s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
18-01-2024 23:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6648b73b5ec629b751903345c2c4965b.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
6648b73b5ec629b751903345c2c4965b.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
6648b73b5ec629b751903345c2c4965b.exe
-
Size
384KB
-
MD5
6648b73b5ec629b751903345c2c4965b
-
SHA1
78020c132a4845574e7f7cddafc51ad74f0e0161
-
SHA256
44e20e7675cadaf10c47c5c5e9377fbeb2f4303bd0e22e3b2104bfa775cb7752
-
SHA512
a782530644e93c94196ba2149a234beb541857cf52197acf99c41d6823127999973789d8c89e911349e3ed707297547ece5df27684a7984640b7a5e678b700b2
-
SSDEEP
6144:P+b2SdvY9wvP6bQ7yMP+DE827I2GNSKNfodyctYrT7/PsW8EZd40seWs9Zxip:GKy6b7MP+Dd2UaKKbtYLPsfEHlWs9ap
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1568 4196 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\6648b73b5ec629b751903345c2c4965b.exe"C:\Users\Admin\AppData\Local\Temp\6648b73b5ec629b751903345c2c4965b.exe"1⤵PID:4196
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4196 -s 4122⤵
- Program crash
PID:1568
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4196 -ip 41961⤵PID:2144