Analysis
-
max time kernel
122s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
01-02-2024 00:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
85759cab4b9689dd558be1feb11a5151.exe
Resource
win7-20231215-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
85759cab4b9689dd558be1feb11a5151.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
85759cab4b9689dd558be1feb11a5151.exe
-
Size
317KB
-
MD5
85759cab4b9689dd558be1feb11a5151
-
SHA1
42e2b6e2b8ce15bbdb86211b001a7a8fdae9fbfb
-
SHA256
e4b30c794c05314113eebc2a0efe254e6c2fdffc13cd34968c18b4632e82bcfd
-
SHA512
665475041da96dfe43a584f726e020408dce134d5877244cf82056454b7874b5852a553071dd93b1a39859af11217fadfbd60f5dbe5c3e496ec4dad7183163de
-
SSDEEP
6144:yQr5j/9N0284TMmEiH8VNhNYbm343qRdhZg3hWFXmtpnATQIi:tR0kTMZiHQNYbr3qRd4R5t1Ao
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2888 6068 WerFault.exe 85759cab4b9689dd558be1feb11a5151.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\85759cab4b9689dd558be1feb11a5151.exe"C:\Users\Admin\AppData\Local\Temp\85759cab4b9689dd558be1feb11a5151.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 6068 -s 4722⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 6068 -ip 60681⤵