Analysis
-
max time kernel
91s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
27-01-2024 14:07
Behavioral task
behavioral1
Sample
7a731229659ec9175cfaf1358d0367f2.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
7a731229659ec9175cfaf1358d0367f2.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
7a731229659ec9175cfaf1358d0367f2.exe
-
Size
2.2MB
-
MD5
7a731229659ec9175cfaf1358d0367f2
-
SHA1
2877b32518445c09418849eb8fb913ed73d7b8fb
-
SHA256
5ae51e30817c0d08d03f120539aedc31d094b080eb70c0691bbfbaa4ec265ef3
-
SHA512
c02df22e900fc9740726e87e991345fd096dd8696c2e3d1365fc40f83c9303fb05b88c1919aa3196377beb076b1f6f5381c4f915b4c368bbc5d5a98047ae57d0
-
SSDEEP
24576:xZKdl5quka1RVs/D8YUT8qg+kFpV/XoZZeUK8rYy6YNKcgdYuD6zoMyRD0N43yw/:xZ68s/LgkrK8cTCqrc0krCAUvJFU1
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4164 4488 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\7a731229659ec9175cfaf1358d0367f2.exe"C:\Users\Admin\AppData\Local\Temp\7a731229659ec9175cfaf1358d0367f2.exe"1⤵PID:4488
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4488 -s 2402⤵
- Program crash
PID:4164
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4488 -ip 44881⤵PID:3728