Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
27/01/2024, 06:02
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
797678c5d56f3b90459046ff2f71f8f7.exe
Resource
win7-20231215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
797678c5d56f3b90459046ff2f71f8f7.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
797678c5d56f3b90459046ff2f71f8f7.exe
-
Size
28KB
-
MD5
797678c5d56f3b90459046ff2f71f8f7
-
SHA1
c9b801672afe1a42efce3ca88d857bf91ed5702c
-
SHA256
1309fb3c33039bf8ed5cc54d10218207c4bb534d5bc3096a6bd3cbd80d952f54
-
SHA512
0dbbf86adf9dd699ba57f5bb147d72e8cfb0281d8bbb7abe870f7a4aa3ebdc3c111cf14d772735187353ceac8ebff4409f1ddec9efa09b0e582cd1380c50357d
-
SSDEEP
768:/vGjLmoSmvJuKqjGmZ7nWljL1pfQedK+R:c8ouNjpKl/1j
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4824 1732 WerFault.exe 70
Processes
-
C:\Users\Admin\AppData\Local\Temp\797678c5d56f3b90459046ff2f71f8f7.exe"C:\Users\Admin\AppData\Local\Temp\797678c5d56f3b90459046ff2f71f8f7.exe"1⤵PID:1732
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1732 -s 2642⤵
- Program crash
PID:4824
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1732 -ip 17321⤵PID:3668