Analysis
-
max time kernel
139s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
12/02/2024, 01:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
95f09ccc7fda0eec432d40fd09e4c149.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
95f09ccc7fda0eec432d40fd09e4c149.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
95f09ccc7fda0eec432d40fd09e4c149.exe
-
Size
402KB
-
MD5
95f09ccc7fda0eec432d40fd09e4c149
-
SHA1
4b2a1041e9b0c0d68ab418813b0100c82021e6ef
-
SHA256
27918640cd6a3db2c4cafa643dfd1a58510d9407ea5b98bb2aecfe79ab59982f
-
SHA512
fdd00e94261758e560ccdcd823ac817474ef72edb75b915930aba2b3e00a2af5bceb11a04d780cf9096ccc2103e5c6bd0e8e48148e7ee638777020764d60ee19
-
SSDEEP
6144:trAZQIyhUblMIrCidfSALKPLF74wnHpqrMmPUllHCyAqDq3cPN:7jQrCiZSAGPLF742/wUP23cPN
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3980 3252 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\95f09ccc7fda0eec432d40fd09e4c149.exe"C:\Users\Admin\AppData\Local\Temp\95f09ccc7fda0eec432d40fd09e4c149.exe"1⤵PID:3252
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3252 -s 5762⤵
- Program crash
PID:3980
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 3252 -ip 32521⤵PID:4736