Analysis
-
max time kernel
93s -
max time network
113s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system -
submitted
24/02/2024, 21:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a2c5daa265ae9cfbcf68a5a7843908f3.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a2c5daa265ae9cfbcf68a5a7843908f3.exe
Resource
win10v2004-20240221-en
1 signatures
150 seconds
General
-
Target
a2c5daa265ae9cfbcf68a5a7843908f3.exe
-
Size
181KB
-
MD5
a2c5daa265ae9cfbcf68a5a7843908f3
-
SHA1
f4686ce15a1250e1426a010d0ddc81c8e329b74e
-
SHA256
9cd5b6677b671aa249138cbf310bc6f4708f1d41ce813e979a97454f997ff12f
-
SHA512
b7815daee49e57ebb8350a7d8ade4eea316eecdec3764fc3bb984cc925a038138b052be3101fa5d538f261b916e599b14b2001923701547e01c091fb3271d0ef
-
SSDEEP
3072:71DCyKcxKVHgHaA8+0ds3tLrBlmpNYqwiFFYLZgP10WGwTloIRHWL9YBPQKuFLMo:71Wynxq2l00ArYqJFFYEGslsL94EhM3s
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2008 1816 WerFault.exe 60
Processes
-
C:\Users\Admin\AppData\Local\Temp\a2c5daa265ae9cfbcf68a5a7843908f3.exe"C:\Users\Admin\AppData\Local\Temp\a2c5daa265ae9cfbcf68a5a7843908f3.exe"1⤵PID:1816
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1816 -s 3482⤵
- Program crash
PID:2008
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 1816 -ip 18161⤵PID:4320