Analysis
-
max time kernel
113s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
18/01/2024, 09:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6504d042f8e452b67da0365221736a0b.exe
Resource
win7-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
6504d042f8e452b67da0365221736a0b.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
6504d042f8e452b67da0365221736a0b.exe
-
Size
244KB
-
MD5
6504d042f8e452b67da0365221736a0b
-
SHA1
cd26194dfedb3a3fd77d779d1b0812dd2ba84b79
-
SHA256
7bf8b9aa9c63656ddd1dc70a08814ca946d1fc140b2f6a0ba84e2ba9b05ae41e
-
SHA512
bf80d33c1abeaf293bd5358a1cdafecd3f63f4bf185cca5f0facf4ad8274959a03ec3e4b7734e91cf51365f6efa2f78296faa4f087d8b5b674d00463fb2e35b4
-
SSDEEP
6144:zOUj+bBvkSHQeZdz+654mE/vf9pd7ngyqhY:zOUj+bBDHLZdK6amE/NVcY
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4304 3624 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\6504d042f8e452b67da0365221736a0b.exe"C:\Users\Admin\AppData\Local\Temp\6504d042f8e452b67da0365221736a0b.exe"1⤵PID:3624
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3624 -s 2722⤵
- Program crash
PID:4304
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3624 -ip 36241⤵PID:684