Analysis
-
max time kernel
93s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
25/01/2024, 12:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Lskj.PubPrint.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Lskj.PubPrint.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
Lskj.PubPrint.exe
-
Size
164KB
-
MD5
e8f117c6823f9efeab1c4ffb88e14f0a
-
SHA1
05688289bc1dd59bd818af3665e46199964f9d80
-
SHA256
ed19d7f0451d38e5aaeb65bf02d81d278f6f2b575b7876581ea26c97db3672fe
-
SHA512
10fd507bd7825bd30eb68cb41b8247795b97c43edcbb855a8096aebac836570cbc7a10ffd270931a828306d4092c11a783fd3b4e8fe98d3d89fbf176d166fd21
-
SSDEEP
768:g6Qg8G5RyqQMLZVt5EQCLj0oaAlnTWhtVps1ROZRt96a226voeF750fATXpOZRt0:oqr3z6a2xvoelTLk3z6a2
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 772 3828 WerFault.exe 45
Processes
-
C:\Users\Admin\AppData\Local\Temp\Lskj.PubPrint.exe"C:\Users\Admin\AppData\Local\Temp\Lskj.PubPrint.exe"1⤵PID:3828
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3828 -s 8242⤵
- Program crash
PID:772
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3828 -ip 38281⤵PID:3244