Analysis
- max time kernel
145s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
04/02/2024, 03:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8e25faaa898fba6ae9a36d0873dcd56b.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
8e25faaa898fba6ae9a36d0873dcd56b.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
- Target 8e25faaa898fba6ae9a36d0873dcd56b.exe
- Size 39KB
- Sample240204-efhk3aghh3
- SHA256 ff1ec5d980b0250e6ff9f5e9e6a84b27474e2c15611156fc73349ff166076495
- MD5 8e25faaa898fba6ae9a36d0873dcd56b
- SHA1 e2b259d6a96ef3708af3b643a427fb3f7d0542eb
- SHA512 9179db682bb456aaa85dc24fd19226c805ac0b719d600972f732b15b4022f1ab0ac4922070406b7fb97b45bfc3b75307e87af5f4ec579b4c4af739a734936a30
- SSDEEP 768:/0UfiwHgh8yEH/qs97e+7nyWXjnantS8YzXB:/0Ufiw+85C27e+NzYUFr
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 2828 640 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\8e25faaa898fba6ae9a36d0873dcd56b.exe"C:\Users\Admin\AppData\Local\Temp\8e25faaa898fba6ae9a36d0873dcd56b.exe"1⤵PID:640
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 640 -s 2722⤵
- Program crash
PID:2828
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 640 -ip 6401⤵PID:2320