Analysis
-
max time kernel
139s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25-01-2024 16:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
74f4d0a64f211531c39dcad5d52de344.exe
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
General
-
Target
74f4d0a64f211531c39dcad5d52de344.exe
-
Size
336KB
-
MD5
74f4d0a64f211531c39dcad5d52de344
-
SHA1
09552893e36f9b4f877727e87b769448756210ca
-
SHA256
9b6123adeb52369e94535b21f5b06472322351835cea616dea12182aa70be0ea
-
SHA512
fa725287b47542340ef60181df5551cfc428d9c85a9ed1b393d338eeef616010aa2ecbb63e52f3571c45ea3bd43c3fb7d27c72269402727bc6689ad010aa95de
-
SSDEEP
6144:1VtqJlbDKzr9NV0g5jvz2lefPGQYc5jYzjp5Tzau:bgJlbDKP9Ne6QzjkuphW
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\74f4d0a64f211531c39dcad5d52de344.exe"C:\Users\Admin\AppData\Local\Temp\74f4d0a64f211531c39dcad5d52de344.exe"1⤵PID:2356
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2356 -s 4762⤵
- Program crash
PID:1608 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2356 -s 5202⤵
- Program crash
PID:1260
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 2356 -ip 23561⤵PID:1136
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 2356 -ip 23561⤵PID:3232