Analysis
-
max time kernel
142s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
14/02/2024, 15:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9bfcea1a6bb328578faa221feb35680d.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
9bfcea1a6bb328578faa221feb35680d.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
9bfcea1a6bb328578faa221feb35680d.exe
-
Size
179KB
-
MD5
9bfcea1a6bb328578faa221feb35680d
-
SHA1
5fb2603b9755c8ce22015370cbdf4a785a8c0eba
-
SHA256
81d8e336ee3fb7e4c7602a21679e0ede0933d7daaed85115af796eb49b64f98c
-
SHA512
83810d760b8cffac6dfb596d7dfa8a8528a7bbd04ab6dd5ff2476235da7b4bfb767d731a5bf3df6b13fe3ef04bf26fa6dfc3e7c17e8eb15f990b95ed429550a2
-
SSDEEP
3072:+NjwGlVCkF59n5lFyGERp9/HMyz0enK07p5kAu5v+6dNez1Mx1EnWsl8LDF3jVuD:+zlj9n5lFyGERp9/HMyz0enK07p5kAuQ
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3792 2392 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\9bfcea1a6bb328578faa221feb35680d.exe"C:\Users\Admin\AppData\Local\Temp\9bfcea1a6bb328578faa221feb35680d.exe"1⤵PID:2392
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2392 -s 2242⤵
- Program crash
PID:3792
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 2392 -ip 23921⤵PID:4844