Analysis
-
max time kernel
136s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
04/02/2024, 11:54
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8f16e98456721d96dd3e3c20a424d46a.exe
Resource
win7-20231215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
8f16e98456721d96dd3e3c20a424d46a.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
8f16e98456721d96dd3e3c20a424d46a.exe
-
Size
64KB
-
MD5
8f16e98456721d96dd3e3c20a424d46a
-
SHA1
b10ca5c962a2f74ac79ffa275e0584c394ba0375
-
SHA256
703682da7d32720f42015a8fc50b545a892453ca43828c89ca27e85e36f7a882
-
SHA512
db0926fc22d8cfe7d072449b74f892c6bf5329135402f830e9b03d5effe472466b5073f92c87233625dc5c7433c1c8049d74df778fb407ae4cd2c0f46c363b66
-
SSDEEP
1536:ZonMcQqN0mRWUi3w4iKEFXvxKqHsOjsNL:Zon/Npow/XeyE
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4696 4584 WerFault.exe 76 4112 4584 WerFault.exe 76
Processes
-
C:\Users\Admin\AppData\Local\Temp\8f16e98456721d96dd3e3c20a424d46a.exe"C:\Users\Admin\AppData\Local\Temp\8f16e98456721d96dd3e3c20a424d46a.exe"1⤵PID:4584
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4584 -s 2522⤵
- Program crash
PID:4696
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4584 -s 2802⤵
- Program crash
PID:4112
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4584 -ip 45841⤵PID:3684
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 4584 -ip 45841⤵PID:4076