Analysis
-
max time kernel
142s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
12-10-2023 11:42
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
manageCenter78.exe
Resource
win7-20230831-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
manageCenter78.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
manageCenter78.exe
-
Size
8.6MB
-
MD5
9ab1a6a4e713a2d7dda124b67473a739
-
SHA1
cc956a96e2295487a35dac71f4ee3124b762aef4
-
SHA256
3ecbf8110550d3703547738504657ffe2e810cbd4f2cd306b8316b59a78c6ce0
-
SHA512
6ea44aeb4e32c5dfe88226f18aa2c3e16e1290c5afcb17be744b7cf778b3f91893f1c2e130a9887de696b0f1882d4737ef526c613ae5694a8bf2a224fac1aedb
-
SSDEEP
98304:XEyRok4UIwNCKYOp6p1IQjkbF8TB8/5di8ddhRzKREWUumPjxqNezmYTPmR:0G4+PtQYbFU8hdiWRHWPmaA
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1776 3756 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\manageCenter78.exe"C:\Users\Admin\AppData\Local\Temp\manageCenter78.exe"1⤵PID:3756
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3756 -s 8042⤵
- Program crash
PID:1776
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3756 -ip 37561⤵PID:1772