Analysis
-
max time kernel
150s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
14/03/2024, 08:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c8225814881ae31bf1a8b26419a40b18.exe
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
c8225814881ae31bf1a8b26419a40b18.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
c8225814881ae31bf1a8b26419a40b18.exe
-
Size
92KB
-
MD5
c8225814881ae31bf1a8b26419a40b18
-
SHA1
f403dcf305207bf51f26c7a4bfa45e2118b3341b
-
SHA256
74d409561a560827dd3416a4ba94429e87ee3219bfa001d3af7d267b0b947fe3
-
SHA512
7b5afeb42b39e1a17494977e7a3fa301fee53b9e745472b9c1469268247dd2135016b6cb0f8028b29654c28042e2a89422048e468ac0401aa5eaec24db8664a2
-
SSDEEP
1536:i7B3eFSUh57aV0aRysRsvcQNVika65lgPRcIit3oaMsdvJ0TVbvq8tn0c131K0:i7Iks5ufyoEcG3lgZ23vMsdqjZ0I3g0
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1364 4348 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\c8225814881ae31bf1a8b26419a40b18.exe"C:\Users\Admin\AppData\Local\Temp\c8225814881ae31bf1a8b26419a40b18.exe"1⤵PID:4348
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4348 -s 5762⤵
- Program crash
PID:1364
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4348 -ip 43481⤵PID:1168