Analysis
-
max time kernel
142s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
01/02/2024, 14:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
871fdf6d7448229846b9f029260172ae.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
871fdf6d7448229846b9f029260172ae.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
871fdf6d7448229846b9f029260172ae.exe
-
Size
40KB
-
MD5
871fdf6d7448229846b9f029260172ae
-
SHA1
208d00eba444c38cd9040223bd6e4513c2c18f27
-
SHA256
fd2291aa343696933a0831271511a10347bf0dfc87d2c207d1d2056d637b7714
-
SHA512
1ff84e836d80b80ddac2fdaedd31fcdaa5fdd51ebe53f3a1f020500498081fea25738e3f5da5565777368c483c69b0237e3f773d95f416940e9aec78f68bcf57
-
SSDEEP
768:Ef1jsdneHORr4d24CwI4ECx2ZCQ3NJ0mQ9mhk5csSG+VgA8d64jL/DpQyocI:CAb4A4WVCxbWNJ01mW5csSG+ipFQy3I
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1196 3180 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\871fdf6d7448229846b9f029260172ae.exe"C:\Users\Admin\AppData\Local\Temp\871fdf6d7448229846b9f029260172ae.exe"1⤵PID:3180
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3180 -s 2522⤵
- Program crash
PID:1196
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 3180 -ip 31801⤵PID:1712