Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
13-03-2024 21:09
Behavioral task
behavioral1
Sample
c6dd13e0b396a3760a009549e350b147.exe
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
c6dd13e0b396a3760a009549e350b147.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
c6dd13e0b396a3760a009549e350b147.exe
-
Size
686KB
-
MD5
c6dd13e0b396a3760a009549e350b147
-
SHA1
f6735c38306d73ddbbd532d12219bef63a695145
-
SHA256
12a3a9a9e9adf9e7471b138961c800b87f8663df4dd90e26047be462fb676bb7
-
SHA512
2e1b2434c5ddd20eee9d4be0fb21bb31dd5837b13fd3c1f9a25fcf3105823582be76102335b861215a9e9a0391543ec9cd8d625c97995536dd23715048677f39
-
SSDEEP
12288:0k3f9kfwJolAU5itiZ6rMgXLP4IDt/Ka5zvbOFaEuA1:hvOfLlX5iFXXj4IDt/3DqFEK
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4016 3788 WerFault.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\c6dd13e0b396a3760a009549e350b147.exe"C:\Users\Admin\AppData\Local\Temp\c6dd13e0b396a3760a009549e350b147.exe"1⤵PID:3788
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3788 -s 2322⤵
- Program crash
PID:4016
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 3788 -ip 37881⤵PID:2336