Analysis
-
max time kernel
142s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
27-01-2024 05:41
Static task
static1
Behavioral task
behavioral1
Sample
d7a6518fcbe2f5ff77ffe403bf1291c8bfaaad75d92d15f886ab37a70b9df278.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
d7a6518fcbe2f5ff77ffe403bf1291c8bfaaad75d92d15f886ab37a70b9df278.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
gvtrg.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
gvtrg.exe
Resource
win10v2004-20231215-en
General
-
Target
gvtrg.exe
-
Size
333KB
-
MD5
a42ac3476a247ae59fbf0ad81b2474ec
-
SHA1
a59eaa90255011fec45719011c839e104c2d189c
-
SHA256
741e4903ef5370f53839c4ad1ec5fe42731ab149d250557d5a0cfba38743e9f1
-
SHA512
aeb32d6813bb09ebc5cf35d6c3e5cc51af3c1387e4706fb882291669b17c4b5775d4c68a10d2dc156cfc2d26bd1a3c73012aadff013f5e59f1b797cb8a5131d4
-
SSDEEP
6144:F4f/BOG5NwJ6M4XCARlXFTWc//SqMb1iRWuuu49oOVdmqQB16EMRvM/QqUuJ5d5:F4f/BOKNnM4XCARlXFTWc//SVb1xuuun
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4064 2700 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\gvtrg.exe"C:\Users\Admin\AppData\Local\Temp\gvtrg.exe"1⤵PID:2700
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2700 -s 5842⤵
- Program crash
PID:4064
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 2700 -ip 27001⤵PID:5064