Analysis
-
max time kernel
333s -
max time network
405s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
05/08/2023, 23:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MGI 0.44.3 Mod v9.exe
Resource
win10v2004-20230703-en
1 signatures
1800 seconds
General
-
Target
MGI 0.44.3 Mod v9.exe
-
Size
20.4MB
-
MD5
46b805eed15983e0f182bf980e11137c
-
SHA1
bf1ea82a4967cc8298e8cf66684c0af66f2286bc
-
SHA256
db09986758dc7e69febc1c3ba6aefd1fa2b1d06c87ce2e11b704d36fd18ed0f2
-
SHA512
ba8bca28b8a373e2254421d44c63cfa1f682a56b96dbf0ed8f033db97590f1b7fbf6db72c9b653050c1dedf550ddd0f1520b9cdf1a7985e239eeda011ab256a4
-
SSDEEP
393216:SnXnECgV+Dp/hZ/hNhxjP29xUMvIgnCMTkxTKjYIPmiU9xUMCdMhmpD0u232:SnXnECg8nNhxz29xUMvyMTGKjYIPmX9G
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3984 224 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\MGI 0.44.3 Mod v9.exe"C:\Users\Admin\AppData\Local\Temp\MGI 0.44.3 Mod v9.exe"1⤵PID:224
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 224 -s 7322⤵
- Program crash
PID:3984
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 224 -ip 2241⤵PID:4860