Analysis
-
max time kernel
1729s -
max time network
1168s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system -
submitted
11/09/2023, 04:20
Behavioral task
behavioral1
Sample
86e3e7dc9cafd72776d32eb551e0c4ee69414037480024a2667843d621860502.zip
Resource
win10v2004-20230831-en
1 signatures
1800 seconds
Behavioral task
behavioral2
Sample
vfuggEeZM.exe
Resource
win10v2004-20230831-en
2 signatures
1800 seconds
Behavioral task
behavioral3
Sample
out.exe
Resource
win10v2004-20230831-en
1 signatures
1800 seconds
General
-
Target
out.exe
-
Size
155KB
-
MD5
396a7fe67b2adf1841c7ac192f615ca1
-
SHA1
1e155d3ced0ea8e59989f72fe5a37089445f593c
-
SHA256
1a924070bda0a079a886e78698b7b179b4b4afe8c2dc075ff8721f29a0061cd5
-
SHA512
cb94fae04026f3f2124fa86384be10c7eeaa206b7e7664f85a6679310b6c1baec942ed0d828b24877ce6506a56324466912996aa549e63480f8b04409b4b7fa4
-
SSDEEP
3072:kk59fo2r2f0oJDib8iLws7ngPcGj9Tf8:kk7o2r2fj2P8sbg0Gj9o
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3404 908 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\out.exe"C:\Users\Admin\AppData\Local\Temp\out.exe"1⤵PID:908
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 908 -s 2242⤵
- Program crash
PID:3404
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 908 -ip 9081⤵PID:4172