Analysis
-
max time kernel
146s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
27/01/2024, 01:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
78edcfdf03a2c86a60c1d070fd408781.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
78edcfdf03a2c86a60c1d070fd408781.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
78edcfdf03a2c86a60c1d070fd408781.exe
-
Size
54KB
-
MD5
78edcfdf03a2c86a60c1d070fd408781
-
SHA1
263ae82d893b9dbc7ff030317a557706d9533249
-
SHA256
8b72b6244b5ed012a5310b1646a6bdbc1031020072c9c463cda78ba5a14cab13
-
SHA512
6856e43f395e366bff9f6488a3d5dc733684b6c65741298f8958f70f6df0d5714c48c8f01219f76c639aae2ce6149d0e62b9b0d0c2472ffc1a93f3d189db6a81
-
SSDEEP
768:BI07zQ0IABWX3GmAoULceBi4d3IalnPZk/Lpd1JCmXrz4UwtlWhwlpdtvw:BIsjIEsSoUgeBi4JdGpgGhj+pI
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 1032 416 WerFault.exe 84 2124 416 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\78edcfdf03a2c86a60c1d070fd408781.exe"C:\Users\Admin\AppData\Local\Temp\78edcfdf03a2c86a60c1d070fd408781.exe"1⤵PID:416
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 416 -s 1482⤵
- Program crash
PID:1032
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 416 -s 2402⤵
- Program crash
PID:2124
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 416 -ip 4161⤵PID:2100
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 416 -ip 4161⤵PID:2636