Analysis
- max time kernel
109s - max time network
128s - platform
windows10-2004_x64 - resource
win10v2004-20230220-en - resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system - submitted
20/04/2023, 03:53
Static task
static1
Behavioral task
behavioral1
Sample
New Order.exe
Resource
win7-20230220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
New Order.exe
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
- Target New Order.exe
- Size 555KB
- Sample230420-efmvsahd41
- SHA256 bd7e8f8ff2db3d253c799414c5c41ef046aecf5790b0b36a2f1eef4763aae16a
- MD5 eb6c9bf7937687f0bf84f17babc1f316
- SHA1 e24b2e66ffa1e9ef984e75c879fb6d572763d075
- SHA512 3bb484034f7c3f6a0fb3016b754064b321d23a7b2defea652c9ae015b16ab5513e451c526e4220de8b7f038b1bb7ca4997ab264828a86721e09e04359f1be9f1
- SSDEEP 12288:gRj9oj8+4A2GTde2NO7QMCEp30hZcVWYJ0hx+caGLt3:0ZrA2GRet7Prp30hZcVWR5aGLN
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4928 4232 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\New Order.exe"C:\Users\Admin\AppData\Local\Temp\New Order.exe"1⤵PID:4232
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4232 -s 12202⤵
- Program crash
PID:4928
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4232 -ip 42321⤵PID:3616