Analysis
-
max time kernel
115s -
max time network
121s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
04/02/2024, 17:37
Behavioral task
behavioral1
Sample
8fc0c416ba7f27b05e3400eb47f999fe.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
8fc0c416ba7f27b05e3400eb47f999fe.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
8fc0c416ba7f27b05e3400eb47f999fe.exe
-
Size
475KB
-
MD5
8fc0c416ba7f27b05e3400eb47f999fe
-
SHA1
d0b2946ed85385b151d55e1c34973f312e05a510
-
SHA256
43d09a98cae2cbf9e224e92dc182a7b05f2627c0ba3e53329da7f0a107171503
-
SHA512
837f47592649ce4031df145a939ce9c283ee3341f1cc25057b146f57444c154c8232dada87342cd40ed310f886ac03b5439b4036474b70e55cb93bb07712caed
-
SSDEEP
6144:+orwmuWRo6iFJXtcDPt0GraatmMVV06lC+7SzJg0BdBFqaG9jgkwvoOnbCyB7U7f:+o46iFJ9cmqg7DoS93qaGJOvhQ7f
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1092 3936 WerFault.exe 16
Processes
-
C:\Users\Admin\AppData\Local\Temp\8fc0c416ba7f27b05e3400eb47f999fe.exe"C:\Users\Admin\AppData\Local\Temp\8fc0c416ba7f27b05e3400eb47f999fe.exe"1⤵PID:3936
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3936 -s 2282⤵
- Program crash
PID:1092
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 3936 -ip 39361⤵PID:396