Analysis
-
max time kernel
144s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
19/03/2024, 05:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d558caece6c9cec0c953dd17c2f6e43d.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
d558caece6c9cec0c953dd17c2f6e43d.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
d558caece6c9cec0c953dd17c2f6e43d.exe
-
Size
40KB
-
MD5
d558caece6c9cec0c953dd17c2f6e43d
-
SHA1
979f92937014b8791b29893821e0b94a72f22fd6
-
SHA256
f79cdf7e111c2e3e41344fa1d1f5fa0cdbf0acc0892ec96716ac82e23459c4fd
-
SHA512
bbcf7ea35a61dedb081fd89d247bffedd5149bb5565803e3e0bdcffd87728a181f46f7be3396136201ed2536d1fe3c563dae154b56423ff27f7145674365bcdc
-
SSDEEP
768:0uzYIEh1pKS6l75LvfaVJ4jGnKezFsYuZIdB4zPl2:p876blPbZIgzPl2
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1376 4684 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\d558caece6c9cec0c953dd17c2f6e43d.exe"C:\Users\Admin\AppData\Local\Temp\d558caece6c9cec0c953dd17c2f6e43d.exe"1⤵PID:4684
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4684 -s 2722⤵
- Program crash
PID:1376
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4684 -ip 46841⤵PID:756