Analysis
-
max time kernel
152s -
max time network
171s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
23-11-2022 10:01
General
-
Target
b1ee7ae267d90a654ee7dc23cab0d8ac5402905abf05579ab8c80b439ba6d997.exe
-
Size
80KB
-
MD5
6e533f5fdfded62bc031d417328c0def
-
SHA1
a80c1454f8482e4d59f977dabdc998fd0c342ce2
-
SHA256
b1ee7ae267d90a654ee7dc23cab0d8ac5402905abf05579ab8c80b439ba6d997
-
SHA512
7693ef172c78d840ae599e2864281c9a3c56e88159c7899e3fc2ae2799c8a0f88bb14e4320e3e74d106beb10d88cfb150d8dcc0bce6b17cfe22e9e2c3c7c006a
-
SSDEEP
768:Vi9LM4MGvX29MWVzxC8nYDMIc2Avbrn9NUNyHlfvHJ5QfnknvxeUrxXupp7eegXc:VKM4MNVzZh2AvPiyHlnXvoUrE71JtR
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b1ee7ae267d90a654ee7dc23cab0d8ac5402905abf05579ab8c80b439ba6d997.exe"C:\Users\Admin\AppData\Local\Temp\b1ee7ae267d90a654ee7dc23cab0d8ac5402905abf05579ab8c80b439ba6d997.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: RenamesItself
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4628 -s 3962⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 4628 -ip 46281⤵