Analysis
-
max time kernel
149s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
27/01/2024, 00:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
78d0184ed9666389b41cc6adb2eafa41.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
78d0184ed9666389b41cc6adb2eafa41.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
78d0184ed9666389b41cc6adb2eafa41.exe
-
Size
65KB
-
MD5
78d0184ed9666389b41cc6adb2eafa41
-
SHA1
0663a7d9f626af8748e5ffff5a2cbd1c71c147c8
-
SHA256
7dad654c9ba23ff1f6d3346cfbe712163f25b84b322b87affaad78b6b5165671
-
SHA512
038f09302473540cd18f9e79d6d35402004596f2d4705a516ff25ab7ad51b2e48295000d108e295d46714a014a173fa199681b1d8ffbd5846fcb0a6aafd10745
-
SSDEEP
768:JQxkwifBsIKFZpcrkMEYEhA7P4RhAtmaZFb79U9MKAjBEigp/1k21m3uHRdMNDjF:J8kwiFTEhU4HDa1KkjWXta21mc/Mue9N
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4732 3608 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\78d0184ed9666389b41cc6adb2eafa41.exe"C:\Users\Admin\AppData\Local\Temp\78d0184ed9666389b41cc6adb2eafa41.exe"1⤵PID:3608
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3608 -s 3962⤵
- Program crash
PID:4732
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3608 -ip 36081⤵PID:5080