Analysis
-
max time kernel
145s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
13-02-2024 09:22
Static task
static1
Behavioral task
behavioral1
Sample
990de904312dada2db035b0789ae2889.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
990de904312dada2db035b0789ae2889.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
990de904312dada2db035b0789ae2889.exe
-
Size
863KB
-
MD5
990de904312dada2db035b0789ae2889
-
SHA1
adb3bc92f6841e87b2a105ca8705366a0d3dc751
-
SHA256
e5e12e3ac00f692c59806613ed5f522157048b9dd399ca0a2cb125627f8ae344
-
SHA512
cef547896c3c065e360e7e7d1d4ff18778c7be6607ef438036061020933fb720bcbe7bf0084e92f9a6234027dec84ad0e1c92a126a532a42565304cb963f5c29
-
SSDEEP
12288:dLB6Aibszwd8vGfGaCRUGCzk0OIgeObT7gqoyr7cociP6sHVI/k/lx9m5XRrj6aN:FBabsM8KGH7Co0OLeGrIocE5lArjPP
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3200 1088 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\990de904312dada2db035b0789ae2889.exe"C:\Users\Admin\AppData\Local\Temp\990de904312dada2db035b0789ae2889.exe"1⤵PID:1088
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1088 -s 5722⤵
- Program crash
PID:3200
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1088 -ip 10881⤵PID:5024