Analysis
-
max time kernel
146s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
13/10/2023, 12:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PO17.exe
Resource
win7-20230831-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
PO17.exe
Resource
win10v2004-20230915-en
1 signatures
150 seconds
General
-
Target
PO17.exe
-
Size
564KB
-
MD5
985f40672b9d8dabfa5c92d1798d88f9
-
SHA1
b1c0fc03a274f683779f863138546aa625af632a
-
SHA256
73dae925d7b1e85ea510421587f7c351ba2cb184dd3009edfd82d75ea18a3aa1
-
SHA512
371917323930466daf2df7498ad0036c97adecbf862924d0af87e380da11a7e915b985db25d78552760ae3fefcfebd74a919ef9c31944ac74a8d2998940a48d8
-
SSDEEP
12288:P2suo0ml+G/HVM3WlmbP9GkRSRIUPIQjxkD6gAoT9XYVgwv4:10ml+GdM3WlwFGcAIQN
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1888 1912 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\PO17.exe"C:\Users\Admin\AppData\Local\Temp\PO17.exe"1⤵PID:1912
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1912 -s 8562⤵
- Program crash
PID:1888
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 1912 -ip 19121⤵PID:3920