Analysis
-
max time kernel
142s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231127-en -
resource tags
arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system -
submitted
15/12/2023, 09:36
Behavioral task
behavioral1
Sample
400000.vgqJAj_4CDI5LZaqKb8GaOCS.exe
Resource
win7-20231201-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
400000.vgqJAj_4CDI5LZaqKb8GaOCS.exe
Resource
win10v2004-20231127-en
1 signatures
150 seconds
General
-
Target
400000.vgqJAj_4CDI5LZaqKb8GaOCS.exe
-
Size
1.1MB
-
MD5
07957d846e16dbd6b12bf1d96c424504
-
SHA1
c7215a5be8eb30d20f3c9f276de8ee344b658e3f
-
SHA256
4c10d5e6fc8cdc63a74e4d1d53db84b3cb893f7b184b2cc88b20dcb237ed5d79
-
SHA512
9b069115b2a932f12a66c40083d782f06f9b5d5bc421e365b089a341e66f35dd84ddcf563c7f2a71eb13cb4d3502704e9395fd4a2b04258f451c587ae6e8fa90
-
SSDEEP
24576:ZBUIKn/vwOXGUXAjCymYZiVtElVIBT2roqnTSSxWeT/gRPOO8c+HUq7:F0dwAYZt6C31WeT4RPOhcqUq7
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1480 4912 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\400000.vgqJAj_4CDI5LZaqKb8GaOCS.exe"C:\Users\Admin\AppData\Local\Temp\400000.vgqJAj_4CDI5LZaqKb8GaOCS.exe"1⤵PID:4912
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4912 -s 5682⤵
- Program crash
PID:1480
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4912 -ip 49121⤵PID:872