Analysis
-
max time kernel
155s -
max time network
170s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
29/12/2023, 23:39
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
073716667140cdebc838e756c7c7ee60.exe
Resource
win7-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
073716667140cdebc838e756c7c7ee60.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
073716667140cdebc838e756c7c7ee60.exe
-
Size
1015KB
-
MD5
073716667140cdebc838e756c7c7ee60
-
SHA1
43aee56d054dd6b0adf8fc43e2d8173beef27467
-
SHA256
2dbc819eac50473df0be109ad06d6232380c7f10f7baea098a0cc23897133519
-
SHA512
ec7219430678414362c0536a4680e1025e15816382dcca5e92bf7751d7919973567b42a39d0dfa858f683638672d7bafb1c17461a70cee93953ad6e7aff8d99a
-
SSDEEP
12288:UOWsyuIKQwJmUQy0VXhmAj5/dmeN4uFVaV4OHJtWpPkkOgQptQIoi64En2qoDOxt:coIokygt5/d5N7MhqmKQ4Ioiot+cbVf
Score
9/10
Malware Config
Signatures
-
CustAttr .NET packer 1 IoCs
Detects CustAttr .NET packer in memory.
resource yara_rule behavioral2/memory/2784-9-0x0000000005F80000-0x0000000005F92000-memory.dmp CustAttr -
Program crash 1 IoCs
pid pid_target Process procid_target 4552 2784 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\073716667140cdebc838e756c7c7ee60.exe"C:\Users\Admin\AppData\Local\Temp\073716667140cdebc838e756c7c7ee60.exe"1⤵PID:2784
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2784 -s 11522⤵
- Program crash
PID:4552
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2784 -ip 27841⤵PID:4776