Analysis
-
max time kernel
145s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
19-01-2024 22:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
68c0249faf22348de7b76a39773b86ad.exe
Resource
win7-20231215-en
windows7-x64
1 signatures
150 seconds
General
-
Target
68c0249faf22348de7b76a39773b86ad.exe
-
Size
239KB
-
MD5
68c0249faf22348de7b76a39773b86ad
-
SHA1
d2d41eb39b5d43f26ab28ffb960b8c581ecba07e
-
SHA256
44845fb08fe9d982af06cc2cd37fadc3aeb478d3ac4f7d33770d1c05eb810b74
-
SHA512
777f31dfce71758f93a2b5906d0c18be6f1d17111bad0aa268a982fa60db85f873bbdae76ccf2c5934cf9d4cfb7cd37b590a30b2b17c2b7e31d216bc712f022d
-
SSDEEP
3072:SSDihxLxuAS+j6lltXI1N1CO2tNKB85skvcCaxXbwDYT9Z9jPTsXDWcLsF2BAKJ:SSDAxLxuw+Y1vCjKcvK1b7THlQz7AK
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\68c0249faf22348de7b76a39773b86ad.exe"C:\Users\Admin\AppData\Local\Temp\68c0249faf22348de7b76a39773b86ad.exe"1⤵PID:4260
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4260 -s 5642⤵
- Program crash
PID:1224
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4260 -ip 42601⤵PID:4956