Analysis
-
max time kernel
93s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
27/01/2024, 21:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7b64160e5adbba08c3f46af274b6b803.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
7b64160e5adbba08c3f46af274b6b803.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
7b64160e5adbba08c3f46af274b6b803.exe
-
Size
107KB
-
MD5
7b64160e5adbba08c3f46af274b6b803
-
SHA1
b183af6a6e6b9a97f2d3aa3794310ed23ce21107
-
SHA256
381decde65a01d638c2df5125d53b5e9f0efd4b302913bd7fc2dc8f748a2e4f3
-
SHA512
e1bf26280c982ab8da4a4d8c92daee3b18c696bade1c2e5dd4f6d6fbb6a0b017cbc8fdf2eaf826541777d2d172cae73be0aa4a7acc8136edf92ffb50097325be
-
SSDEEP
3072:WPCon/aHkWcvExbOJ2GOWOl9j6oHcEq8KHR4/6IQbm7lzXL+hF:WaonSzcVJ2Ggll/KHR4SpkpW
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4348 3444 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\7b64160e5adbba08c3f46af274b6b803.exe"C:\Users\Admin\AppData\Local\Temp\7b64160e5adbba08c3f46af274b6b803.exe"1⤵PID:3444
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3444 -s 2242⤵
- Program crash
PID:4348
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3444 -ip 34441⤵PID:1372