Analysis
- max time kernel
133s - max time network
174s - platform
windows10-2004_x64 - resource
win10v2004-en-20220113 - submitted
25/03/2022, 18:14
Static task
static1
Behavioral task
behavioral1
Sample
DOKUMENT TA’ RIĊEVUTA DHL7048297463,pdf.exe
Resource
win7-20220311-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
DOKUMENT TA’ RIĊEVUTA DHL7048297463,pdf.exe
Resource
win10v2004-en-20220113
0 signatures
0 seconds
General
- Target DOKUMENT TA’ RIĊEVUTA DHL7048297463,pdf.exe
- Size 1.0MB
- Sample220325-wvddbsbad9
- SHA256 e9e0c366653836804dbd66fa13dc4909cb186a2117764679e1e46f29dc9500bc
- MD5 8c8ae0d9951ee9a48b0999d46a65798c
- SHA1 114884020624a002f612012bc2d36327e2733dcf
- SHA512 0359fb81aacbc8eba2891523da8b2d3e2030c2a0c83466d343ac3d12642f14755d34b4048517a38353900711bfcb2f2eeaf4f1ebc2b6bd449403486a66d517e8
- MD5 SHA1 SHA512
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4020 1648 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\DOKUMENT TA’ RIĊEVUTA DHL7048297463,pdf.exe"C:\Users\Admin\AppData\Local\Temp\DOKUMENT TA’ RIĊEVUTA DHL7048297463,pdf.exe"1⤵PID:1648
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1648 -s 11562⤵
- Program crash
PID:4020
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 1648 -ip 16481⤵PID:4412