Analysis
-
max time kernel
135s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system -
submitted
08/06/2023, 09:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ASM_OperativesAdmn.exe
Resource
win7-20230220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ASM_OperativesAdmn.exe
Resource
win10v2004-20230221-en
1 signatures
150 seconds
General
-
Target
ASM_OperativesAdmn.exe
-
Size
572KB
-
MD5
5bcb566516c91abb1209d1e831135382
-
SHA1
9f82e27515079a9edd76a0ac747f16eb30865562
-
SHA256
750d15c26caffed87d781e62f07e8b4bff95035b103d51394dd72f2e4710c91b
-
SHA512
1da2d815f0dfb4d8c226ae24a3b383c78af43e0e27b49b3a02ae8e2e31012e040c1b04917f23d6f836dde2f57374d2bc3956d7eecab5b881b642746bd3c04ee8
-
SSDEEP
12288:kZXaY89SVJcdqRm9mdccccccccccccccLcccccccccccccc:kZXaYGseyccccccccccccccLcccccccW
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3796 4752 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\ASM_OperativesAdmn.exe"C:\Users\Admin\AppData\Local\Temp\ASM_OperativesAdmn.exe"1⤵PID:4752
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4752 -s 7482⤵
- Program crash
PID:3796
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 364 -p 4752 -ip 47521⤵PID:4760