Analysis
- max time kernel
135s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20230220-en - resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system - submitted
22/03/2023, 15:22
Static task
static1
Behavioral task
behavioral1
Sample
IMG-104741602223pdf.exe
Resource
win7-20230220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG-104741602223pdf.exe
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
- Target IMG-104741602223pdf.exe
- Size 2.3MB
- Sample230322-srwtqabe3t
- SHA256 93d8eb4963a678c63ebacaba3738f716d901aa18a2531f2761b378bae861812a
- MD5 e4aeacf03592afe557aa84baced57f10
- SHA1 e6b2a73b46421c916768fa55ea5cbc772e9b0db8
- SHA512 3ffe39fae4e579b84f916ee0c6f7eaca1682eb45a64832c5f050fdc636187bf175d6572e00231a7ef436bfd20ac86f950e297ac409f7b9aedc94ac4b84f9399c
- SSDEEP 24576:16IOwQ78u+zpGDJz7AY3x9Ot09OX7l348A5NyX37circNOreGwOTwOsGPNs4Qlds:b47MyTIceeosTerr5hqIdARjQ
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 2192 1436 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\IMG-104741602223pdf.exe"C:\Users\Admin\AppData\Local\Temp\IMG-104741602223pdf.exe"1⤵PID:1436
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1436 -s 7922⤵
- Program crash
PID:2192
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 1436 -ip 14361⤵PID:2888