Analysis
-
max time kernel
135s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system -
submitted
25/04/2023, 11:47
Behavioral task
behavioral1
Sample
f324202e981701dbe7996e3cc2baabbe5ab10b79be0eb9a9604e8a6081ab1ad9.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
f324202e981701dbe7996e3cc2baabbe5ab10b79be0eb9a9604e8a6081ab1ad9.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
out.exe
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
out.exe
Resource
win10v2004-20230221-en
General
-
Target
out.exe
-
Size
44KB
-
MD5
a061965265d13647be6adcb9ce949676
-
SHA1
09f466d6653a03baea72d7833cdaae5c2bde3bbb
-
SHA256
2f80d1de589537463cbf0d38dc5438a1974b4a7c20213461749ac30294073d4d
-
SHA512
4b5f25b24f3ba7c2965050a2a916712e334bbf75e731c24453ea1826aa11ecc849e936e576ee8b18ee62f33f8d9980fe05eb28bcfc321b93867ee51af61f9c2d
-
SSDEEP
384:hBeuAgzp9ZkNg1ZLObt860c04yUnunTz6OlnNCeSnyFXBHy8LPl:hBLbsOPqy5eunT+WMbOBHrP
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3744 4264 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\out.exe"C:\Users\Admin\AppData\Local\Temp\out.exe"1⤵PID:4264
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4264 -s 2482⤵
- Program crash
PID:3744
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4264 -ip 42641⤵PID:3448