Analysis
-
max time kernel
102s -
max time network
102s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
19/07/2024, 07:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6d512c986ab8e979047fbb43646a2a30N.exe
Resource
win7-20240704-en
2 signatures
120 seconds
Behavioral task
behavioral2
Sample
6d512c986ab8e979047fbb43646a2a30N.exe
Resource
win10v2004-20240709-en
1 signatures
120 seconds
General
-
Target
6d512c986ab8e979047fbb43646a2a30N.exe
-
Size
472KB
-
MD5
6d512c986ab8e979047fbb43646a2a30
-
SHA1
747f606bbcc8ec8581515f1f7d5ea9d6ce4cb769
-
SHA256
5c248313853629d1fee1351e770df891031f1e851688fbd3b1f4186e9a26471d
-
SHA512
0f14b9f05cd5081c6e81301762d7b301b1351284d4a95ebd3e99ed27c2cd09f727c799d8f6a946e8a2a941b85cc6e2947571c921a46b1b4de26bc7f4c070c803
-
SSDEEP
3072:N8RinudiP52xx67lLd5iHDoajUJPNIxdomv6V8Drg2bkbT3Tw/1:SkgiPA6RXP4UJFIxiOg2cT3T+1
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4908 3272 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\6d512c986ab8e979047fbb43646a2a30N.exe"C:\Users\Admin\AppData\Local\Temp\6d512c986ab8e979047fbb43646a2a30N.exe"1⤵PID:3272
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3272 -s 2242⤵
- Program crash
PID:4908
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3272 -ip 32721⤵PID:4588