Analysis
-
max time kernel
142s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
01/01/2024, 13:02
Behavioral task
behavioral1
Sample
18dfcf81046272e08f6ef3230df83008cb78eb30cda341c59ceb33c5be542d85.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
18dfcf81046272e08f6ef3230df83008cb78eb30cda341c59ceb33c5be542d85.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
out.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
out.exe
Resource
win10v2004-20231215-en
General
-
Target
out.exe
-
Size
518KB
-
MD5
0b9fd6e3bf95f1608645fbffa9df8570
-
SHA1
0231675484946c27f3fea6a0e9994e505ba598a6
-
SHA256
9b521b229eda91ad472146584bd6f857f8dc1af214b6d74ea56402c723757923
-
SHA512
d321b414055ab46088f7cfd5d4757296d0cb8252514fb892377b2cf5e059a5a4ee0199b7e6a0f8c9d021740a6d912a68e09fd6b7173828fcafea0647cc8e5051
-
SSDEEP
12288:rBi6X4QeWEK+OeO+OeNhBBhhBBXP8FpaqLp39KO/ChXEegDQm8D+yhIlS:r4QePmLpx2XngB8D+BlS
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4792 2484 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\out.exe"C:\Users\Admin\AppData\Local\Temp\out.exe"1⤵PID:2484
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2484 -s 2202⤵
- Program crash
PID:4792
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2484 -ip 24841⤵PID:2904