Analysis
-
max time kernel
145s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
13/02/2024, 11:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9949b00cc293ef31ef68ae9ff25b907d.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
9949b00cc293ef31ef68ae9ff25b907d.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
9949b00cc293ef31ef68ae9ff25b907d.exe
-
Size
88KB
-
MD5
9949b00cc293ef31ef68ae9ff25b907d
-
SHA1
09d2d8840523210ebd9c9b2a8f3e8c955088c37a
-
SHA256
3875eaf81f9c62e4d6dd9c6fb9221be4bd788d15030aa32ec81c74f9ec92264e
-
SHA512
e5d437b21543b2e70fd7bcdb0cfed4438009122322d663556ae9c0260c485de37d4040e72b965ab8d04df63996ca9bd834e0c7a70e6c09fd08a3795abd21cad1
-
SSDEEP
1536:fhZNjFVhpTEmj8jnh9cPomqSPv39Bf4WsriwkZIMwjZqxMoLIWJ6:LdiTh9cAmqi/JsrEZ0joxMoLI
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4520 1148 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\9949b00cc293ef31ef68ae9ff25b907d.exe"C:\Users\Admin\AppData\Local\Temp\9949b00cc293ef31ef68ae9ff25b907d.exe"1⤵PID:1148
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1148 -s 4282⤵
- Program crash
PID:4520
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 1148 -ip 11481⤵PID:4472