Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
13/03/2024, 03:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c4dcd513a30787a6ffd578d5b4c256d1.exe
Resource
win7-20240220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
c4dcd513a30787a6ffd578d5b4c256d1.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
c4dcd513a30787a6ffd578d5b4c256d1.exe
-
Size
119KB
-
MD5
c4dcd513a30787a6ffd578d5b4c256d1
-
SHA1
1ec5f285050ade4c957b68e33137b01dab027c88
-
SHA256
e8b99650afa96ac068b65b04eb078de9e6c73938c06970f83f9e2d586d587f4e
-
SHA512
303fa469075267134c2c3dc813691e5218913c93eda2a8e1c3810db094cfe6a575c163a0a88fabfde998c2e08481d5fde1a2c239eedcf1b98bb302cfbfeed70f
-
SSDEEP
3072:dg8F3q/4CIrhBK0RFu4B3NhHDRGg/6EMcaxNL:+8F31PrhBBFuS3N5RGgSnp
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3784 4512 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\c4dcd513a30787a6ffd578d5b4c256d1.exe"C:\Users\Admin\AppData\Local\Temp\c4dcd513a30787a6ffd578d5b4c256d1.exe"1⤵PID:4512
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4512 -s 2242⤵
- Program crash
PID:3784
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 4512 -ip 45121⤵PID:4220