Analysis
-
max time kernel
135s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system -
submitted
22/03/2023, 14:40
Static task
static1
Behavioral task
behavioral1
Sample
716335ba5cd1e7186c40295b199190e2b6655e48f1c1cbe12139ba67faa5e1ac.zip
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
716335ba5cd1e7186c40295b199190e2b6655e48f1c1cbe12139ba67faa5e1ac.zip
Resource
win10v2004-20230221-en
Behavioral task
behavioral3
Sample
nbnbnbnbnbnb.exe
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
nbnbnbnbnbnb.exe
Resource
win10v2004-20230220-en
General
-
Target
716335ba5cd1e7186c40295b199190e2b6655e48f1c1cbe12139ba67faa5e1ac.zip
-
Size
15.6MB
-
MD5
baa422ba2a6e1dc0e8e640683da3ee07
-
SHA1
5d27381577e2d7bb605981bd0fb860b1345eecd7
-
SHA256
c5b2591ba9149ca25d7936a9e5a27d92acd8f10e8e0a0b1d0f63928843a7a019
-
SHA512
b47cf2766728890ae83aacd46185655d0f10e7996589656c2aa52485b31a2165f4693aed4143d7ee6769e7426c225f46e7f062fa79221190f41fef6462609ed3
-
SSDEEP
393216:eFDFEnQbmLDnASZDdDxYfecQbLHZsoauY2+U:M2Qbm/nrZDd1CecoL5sRdq
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3100 5044 WerFault.exe 101
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\716335ba5cd1e7186c40295b199190e2b6655e48f1c1cbe12139ba67faa5e1ac.zip1⤵PID:2120
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 460 -p 5044 -ip 50441⤵PID:3228
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 5044 -s 17521⤵
- Program crash
PID:3100