Analysis
-
max time kernel
135s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
09-06-2023 08:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PK01508Q0014968PKKHI.exe
Resource
win7-20230220-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
PK01508Q0014968PKKHI.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
PK01508Q0014968PKKHI.exe
-
Size
770KB
-
MD5
d3dc5a3c9621864bba383e22d08df74e
-
SHA1
3c8218060391449a2014b517488db08b9a19ea16
-
SHA256
245a20192e8a60b33f64b2b7d118c9d5db7cd4a91179df7689a37e8ce7d29d20
-
SHA512
6383874f1ffc186cac5cfd652a1efa43bb69925e2070332b510b2a9722a4a8ae7408571e3a3e0a6ae46b53047f2565f3aea38953aa89e0443ac8f3f3fd4e14ba
-
SSDEEP
12288:Y2iNUewx/NscEQ+vgXK1HsaDuOv8Bsi66d7CoRZGmH1eG6qNuy3+nVqoh9G/q:Y1iewlqB6p2Oii3rGM6o3+Vqo2/q
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1648 1320 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\PK01508Q0014968PKKHI.exe"C:\Users\Admin\AppData\Local\Temp\PK01508Q0014968PKKHI.exe"1⤵PID:1320
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1320 -s 11162⤵
- Program crash
PID:1648
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1320 -ip 13201⤵PID:4180