Analysis
-
max time kernel
92s -
max time network
121s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
14/02/2024, 02:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
97aa554ca1f489bc9553de882154bb39.exe
Resource
win7-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
97aa554ca1f489bc9553de882154bb39.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
97aa554ca1f489bc9553de882154bb39.exe
-
Size
515KB
-
MD5
97aa554ca1f489bc9553de882154bb39
-
SHA1
bd0b0f6e84dbef3cc77585d1f2531f32c94544b5
-
SHA256
40189d0f7cc8af2ea8c8fe4ad7e2035cca5f0d95df33c9593ca9619320e74305
-
SHA512
510d180e55039b8dc6a226efa93f2b3ad6b219845d17eca4c1c8da2d8d8ae444b8f1207e617e60915fa1edadb71f309ed5e52a679de12b219250d2b6c0b11694
-
SSDEEP
12288:XlZX4AU3yEW3Bnk6zaK76BnAf/g3/2Uv1uY1m1UbSwpSVSFpBgyua:Ds3yXkQS2/qOUv1tuaSVzyH
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 3560 4152 WerFault.exe 84 4540 4152 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\97aa554ca1f489bc9553de882154bb39.exe"C:\Users\Admin\AppData\Local\Temp\97aa554ca1f489bc9553de882154bb39.exe"1⤵PID:4152
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4152 -s 6802⤵
- Program crash
PID:3560
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4152 -s 7202⤵
- Program crash
PID:4540
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4152 -ip 41521⤵PID:4992
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 4152 -ip 41521⤵PID:4520