Analysis
- max time kernel
144s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
01/02/2024, 13:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
870a1429051e334da788bcffe78d5992.exe
Resource
win7-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
870a1429051e334da788bcffe78d5992.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
- Target 870a1429051e334da788bcffe78d5992.exe
- Size 92KB
- Sample240201-q33ejagfgp
- SHA256 8051adb7271b6b9b0ab8467afd99200526b96346a7888edf9c47d3c099f8e91a
- MD5 870a1429051e334da788bcffe78d5992
- SHA1 9cc98c655bbf4d4d8a7ed04715fd0bc4d22f803b
- SHA512 f5f32cdd8d7ae36425853c17252dc3f698b73802833b3fc7a570a10086fc47d758693a6a8dbff2531735f61825f381e8febfea0a77ef1b2c3fae0330447888a8
- SSDEEP 1536:sCCUNv6nomjXChNH7QKoNMGdCjwCSos1VwYnvGWg4qF8cFyi/0efCGCl1uL4b0:sCC+EomDqc+G3CSNLwY+n4qFA4CGC3ur
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 3076 4848 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\870a1429051e334da788bcffe78d5992.exe"C:\Users\Admin\AppData\Local\Temp\870a1429051e334da788bcffe78d5992.exe"1⤵PID:4848
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4848 -s 5762⤵
- Program crash
PID:3076
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4848 -ip 48481⤵PID:4192