Analysis
-
max time kernel
144s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
19/03/2024, 21:02
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d71b4ed023dc888e89d42758bb02ce25.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
d71b4ed023dc888e89d42758bb02ce25.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
d71b4ed023dc888e89d42758bb02ce25.exe
-
Size
430KB
-
MD5
d71b4ed023dc888e89d42758bb02ce25
-
SHA1
38469186299667e0a0a36210201eb4625794f35f
-
SHA256
be9740800644438165cfda4cf1785dbe916ea814ebd97a0a9399445deec23bdd
-
SHA512
2601d1c8a0747292814456a367caa648078cf8bb0d1e65e067b881e192da6371a38d5f8b2e892990a1960ca5e1b3b70cb03ff4b070c0c5cbef264d64b7b261d6
-
SSDEEP
6144:bFpylcR4rp2ht7IzOY/Md0tYT816MHeW+02TYFq40o+Xu0ZBbaihKlXiBpciZ:hpx6llzB/SDijsTLoejfaihMociZ
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4952 4492 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\d71b4ed023dc888e89d42758bb02ce25.exe"C:\Users\Admin\AppData\Local\Temp\d71b4ed023dc888e89d42758bb02ce25.exe"1⤵PID:4492
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4492 -s 2642⤵
- Program crash
PID:4952
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4492 -ip 44921⤵PID:1408