Analysis
-
max time kernel
140s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
25-12-2023 23:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
41fab16cadfef1fa18e6d5554d72868d.exe
Resource
win7-20231215-en
windows7-x64
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
41fab16cadfef1fa18e6d5554d72868d.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
41fab16cadfef1fa18e6d5554d72868d.exe
-
Size
1017KB
-
MD5
41fab16cadfef1fa18e6d5554d72868d
-
SHA1
51aaa5f1930824f5661de9cb4e43227a73edd4af
-
SHA256
bcf192bdcd7bbad46cb0d7f6cb392233abdb0251db3fea05936d4c0a0c7cc1bc
-
SHA512
5f349fe86f29efa6cf52a8f6a6bb4fcfdf5fc190c59a40a7ab61d419418a9847f6905b43cdf1eb798fe4b2caf4a23fe471172664a157fb27affeb413de91ea57
-
SSDEEP
24576:UjW8Zx2IY6SmUg6MHyPmMEduQLG4R1vuRut1Z:Uq8jTRSScE59RCW
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3803511929-1339359695-2191195476-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\41fab16cadfef1fa18e6d5554d72868d = "\"C:\\Users\\Admin\\AppData\\Local\\7038591.exe\" 0 23 " 41fab16cadfef1fa18e6d5554d72868d.exe -
Program crash 1 IoCs
pid pid_target Process procid_target 1212 4716 WerFault.exe 69
Processes
-
C:\Users\Admin\AppData\Local\Temp\41fab16cadfef1fa18e6d5554d72868d.exe"C:\Users\Admin\AppData\Local\Temp\41fab16cadfef1fa18e6d5554d72868d.exe"1⤵
- Adds Run key to start application
PID:4716 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4716 -s 8922⤵
- Program crash
PID:1212
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4716 -ip 47161⤵PID:2860