Analysis
-
max time kernel
141s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
29-12-2023 21:26
Static task
static1
Behavioral task
behavioral1
Sample
LTA_Avira_By_LuchoPR/LTA Avira By LuchoPR/LTA Avira By LuchoPR.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
LTA_Avira_By_LuchoPR/LTA Avira By LuchoPR/LTA Avira By LuchoPR.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
LTA_Avira_By_LuchoPR/LTA Avira By LuchoPR/Stub.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
LTA_Avira_By_LuchoPR/LTA Avira By LuchoPR/Stub.exe
Resource
win10v2004-20231222-en
General
-
Target
LTA_Avira_By_LuchoPR/LTA Avira By LuchoPR/Stub.exe
-
Size
36KB
-
MD5
016e7ef63e0865f8272a53aa3e49ee1b
-
SHA1
6ebe6be3a5ef584c06dc11d3f04596332b821c82
-
SHA256
b9e40a26107b019abe4dd103a4776ba21a0383604e63028250153c5a59604f4c
-
SHA512
42365b88af79cd46f0c7cd2fd76243b1b2ff7e5b6dc72fb8cf9fdd5c5487ecdfb2f0870546952182f2b9e18b9acc07b8b84adef0a9a79863a872dafe6ddcd690
-
SSDEEP
768:XWo7OI4ST003lwmxMdd/0ZoIWTWcjHUL:1aIVllWddZIncjM
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3628 3856 WerFault.exe 16
Processes
-
C:\Users\Admin\AppData\Local\Temp\LTA_Avira_By_LuchoPR\LTA Avira By LuchoPR\Stub.exe"C:\Users\Admin\AppData\Local\Temp\LTA_Avira_By_LuchoPR\LTA Avira By LuchoPR\Stub.exe"1⤵PID:3856
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3856 -s 2242⤵
- Program crash
PID:3628
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3856 -ip 38561⤵PID:4840