Analysis
- max time kernel
90s - max time network
96s - platform
windows10-2004_x64 - resource
win10v2004-20230621-en - resource tags
arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system - submitted
27/06/2023, 07:25
Static task
static1
Behavioral task
behavioral1
Sample
79b8eb1674365a607baa86f8274b8f7c.exe
Resource
win7-20230621-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
79b8eb1674365a607baa86f8274b8f7c.exe
Resource
win10v2004-20230621-en
1 signatures
150 seconds
General
- Target 79b8eb1674365a607baa86f8274b8f7c.exe
- Size 496KB
- Sample230627-h8y1asdd67
- SHA256 b8b75479747af7f1297ea932b29ff54d25b11e473d40054ddd5bfb2f1f709f27
- MD5 79b8eb1674365a607baa86f8274b8f7c
- SHA1 c9e82a4be67bf69f176ec505fef9d417b4c5b5f2
- SHA512 8d024e64e5199d09a3009bff3573e56c31e17d0981fd459c365c9b1923fd48bad331a156135ac6c1d364c29594f042c5d980c71f95e57818c5f28264a527be2f
- SSDEEP 12288:aMnO803zFaxxVR9UEXirp4zO8cllkLX0ot:aMO80Za1R9UEkp4CFkLp
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 1448 5100 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\79b8eb1674365a607baa86f8274b8f7c.exe"C:\Users\Admin\AppData\Local\Temp\79b8eb1674365a607baa86f8274b8f7c.exe"1⤵PID:5100
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5100 -s 2922⤵
- Program crash
PID:1448
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 5100 -ip 51001⤵PID:1992