Analysis
-
max time kernel
92s -
max time network
131s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
19-03-2024 05:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d54606ee37d5b485525e6491e188d5fa.exe
Resource
win7-20240221-en
windows7-x64
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
d54606ee37d5b485525e6491e188d5fa.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
d54606ee37d5b485525e6491e188d5fa.exe
-
Size
348KB
-
MD5
d54606ee37d5b485525e6491e188d5fa
-
SHA1
26bfeeecf913fa14ea46ffa4fd61a0f307b37011
-
SHA256
14fd1d18fb353cc839d4dde0e042d8db805c5c941b9d308bc4032d84df5cfb4b
-
SHA512
d8c15391450dcd123d92999ddacfbbcdd71b4e259fd4125ea148d5d6c8cd5ea381876e734d033ca46053fd1b5f2cc89d42919098aff6b27c1978c9dc65719127
-
SSDEEP
6144:rNLFpePXQ8YQsA3XQ/lty+hZvu++njEgd4G1AmCeHjkhbMg/8U7o:hjePgbQjw/ZS3aoCgebMB
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2008 3364 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\d54606ee37d5b485525e6491e188d5fa.exe"C:\Users\Admin\AppData\Local\Temp\d54606ee37d5b485525e6491e188d5fa.exe"1⤵PID:3364
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3364 -s 3042⤵
- Program crash
PID:2008
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3364 -ip 33641⤵PID:4536