Analysis
-
max time kernel
91s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
24/01/2024, 00:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
70e8df6dfe5b1e15a9ea2990ab802903.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
70e8df6dfe5b1e15a9ea2990ab802903.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
70e8df6dfe5b1e15a9ea2990ab802903.exe
-
Size
22KB
-
MD5
70e8df6dfe5b1e15a9ea2990ab802903
-
SHA1
451d96d4ae26b54b9770d95e69843c20c920686c
-
SHA256
4157d870fff93d996d5bdca43d4c0976daeaaf660970894b8865709576715fee
-
SHA512
1b51a3e635bfa0b84f1738fdfe58954fff56af0214a89c118caa5589dbd2d1662e5b2cd4490cc39fbe4765a93dec3c696f124428222bb0438f1f65e314f69214
-
SSDEEP
384:vY2vDkMqb/6EB2GQ7QN8egBBxvCxONWToc/NwGpy7XDGScj:g286OmQN+BBxKxONWkQNwG47TGz
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2244 396 WerFault.exe 77
Processes
-
C:\Users\Admin\AppData\Local\Temp\70e8df6dfe5b1e15a9ea2990ab802903.exe"C:\Users\Admin\AppData\Local\Temp\70e8df6dfe5b1e15a9ea2990ab802903.exe"1⤵PID:396
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 396 -s 2682⤵
- Program crash
PID:2244
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 396 -ip 3961⤵PID:3796