Analysis
-
max time kernel
93s -
max time network
121s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
12-03-2024 14:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c39b9308f25a70a02ef138835390efa4.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
c39b9308f25a70a02ef138835390efa4.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
c39b9308f25a70a02ef138835390efa4.exe
-
Size
329KB
-
MD5
c39b9308f25a70a02ef138835390efa4
-
SHA1
d7b58aa632d5d7e5bf80876dfad23d7b8ad56d0f
-
SHA256
9ed8bdf72fcb8c93d4b94eb48486e1331c8b6250eb84ac1c54bfb9485c096d71
-
SHA512
19830ecc601b0b2a244568553c90dcba2f6f6a62bc1a50cb90492697258a6209dad1a8c566961a3c2802ad2788680ee794899f97bd71cce5bdf2721808a9e2e7
-
SSDEEP
6144:9NNN+EUQbxcveBwSjsluIpT+6Y79SCvRFT5lRr6E8RwNmRR5Iey:9/cQymBwSjsjpT+6ESCvRx5Hr6E8RwNd
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5020 1080 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\c39b9308f25a70a02ef138835390efa4.exe"C:\Users\Admin\AppData\Local\Temp\c39b9308f25a70a02ef138835390efa4.exe"1⤵PID:1080
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1080 -s 3322⤵
- Program crash
PID:5020
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 1080 -ip 10801⤵PID:1704