Analysis
-
max time kernel
140s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/01/2024, 22:39
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
75af8aef0381fa32f2567a869beb47ee.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
75af8aef0381fa32f2567a869beb47ee.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
75af8aef0381fa32f2567a869beb47ee.exe
-
Size
41KB
-
MD5
75af8aef0381fa32f2567a869beb47ee
-
SHA1
e316cfd468e921cecacc85fd3da094150b9bf1be
-
SHA256
53d21bf1c922fcb2cde98de0f68379970295009355b791d34cb78cb8384aac79
-
SHA512
8c943feb281e87e1cf77f3279d4c805d1fd1a393a6d0723d63028516be71d781f489f1fb2036ed63171e45114a615c8c976368a927c5930e028c5a11d6d81bd6
-
SSDEEP
768:ob71uwaXEh/UgzV4TeYhWkQlp71L1dx8/PcSVX7RucPgMJPWHJYjlsiAdnBUR:ob71uBngh46Yhgl/xdxUUclJPz1WnBI
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2288-2-0x0000000000400000-0x0000000000410000-memory.dmp upx behavioral2/memory/2288-1-0x0000000000400000-0x0000000000410000-memory.dmp upx behavioral2/memory/2288-5-0x0000000000400000-0x000000000040C000-memory.dmp upx -
Program crash 1 IoCs
pid pid_target Process procid_target 3252 2288 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\75af8aef0381fa32f2567a869beb47ee.exe"C:\Users\Admin\AppData\Local\Temp\75af8aef0381fa32f2567a869beb47ee.exe"1⤵PID:2288
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2288 -s 4882⤵
- Program crash
PID:3252
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 2288 -ip 22881⤵PID:4912