Analysis
- max time kernel
101s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20220331-en - submitted
12/04/2022, 05:41
Static task
static1
Behavioral task
behavioral1
Sample
OCBC TT USD 34,890.exe
Resource
win7-20220331-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
OCBC TT USD 34,890.exe
Resource
win10v2004-20220331-en
0 signatures
0 seconds
General
- Target OCBC TT USD 34,890.exe
- Size 716KB
- Sample220412-gdeshaafb3
- SHA256 c130e105a03b4d144a63a8be13f6c84aa4bb01df2a566756e022e79bec487c20
- MD5 38d9317afff9aa504f020a2f04852f5d
- SHA1 2a3b387e98507f93e84fdd201ff8cb03ebdc773e
- SHA512 520952df0c162096df0e5d8f8a7e1150e7e1529a2b5dba0a01041b6c88590c41d95437b911c27d75912fe77352ea6bf992ea504a6f1296da4d2d5a79174b2a81
- MD5 SHA1 SHA512
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 2036 4664 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\OCBC TT USD 34,890.exe"C:\Users\Admin\AppData\Local\Temp\OCBC TT USD 34,890.exe"1⤵PID:4664
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4664 -s 16162⤵
- Program crash
PID:2036
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4664 -ip 46641⤵PID:1928