Analysis
-
max time kernel
137s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
19-05-2023 02:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2023-05-18_111b34aea0e933c7102d74b12cef356c_destroyer_sage.exe
Resource
win7-20230220-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2023-05-18_111b34aea0e933c7102d74b12cef356c_destroyer_sage.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
2023-05-18_111b34aea0e933c7102d74b12cef356c_destroyer_sage.exe
-
Size
58KB
-
MD5
111b34aea0e933c7102d74b12cef356c
-
SHA1
4825680ea9e8c0720aeb516d5354ba6e58cff69f
-
SHA256
5f20eefbda20071585f92716aab3ba57af9e8e669c8b1ae6119e976995b3f7fe
-
SHA512
e07a57ce0773a1403d56e5f853aec400f1172535b808bd3200f4d444cedb0bfd88c634e54720b84835a274083b3c9ab454e7500552abae7393a26e2253209415
-
SSDEEP
1536:WF4HL5iOEGybPDUBqPhRoBKrZgzvqPrg+SNDN:WF4HLltOhNVgzyzzSNDN
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4508 384 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\2023-05-18_111b34aea0e933c7102d74b12cef356c_destroyer_sage.exe"C:\Users\Admin\AppData\Local\Temp\2023-05-18_111b34aea0e933c7102d74b12cef356c_destroyer_sage.exe"1⤵PID:384
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 384 -s 5842⤵
- Program crash
PID:4508
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 384 -ip 3841⤵PID:4948