Analysis
- max time kernel
145s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20231222-en - resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system - submitted
27/01/2024, 15:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7aaab376fadfa41853401aeb705326cd.exe
Resource
win7-20231215-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
7aaab376fadfa41853401aeb705326cd.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
- Target 7aaab376fadfa41853401aeb705326cd.exe
- Size 71KB
- Sample240127-tfa9bahbcl
- SHA256 b649b29a66f2e118aa8e57c6fd39f3f92594b05086158cb35efd0278270f91c5
- MD5 7aaab376fadfa41853401aeb705326cd
- SHA1 4265483f0bcba15b1f7cf88c46d934f42c14fc16
- SHA512 73e31c7f5895f9406222410c9ea7ecda60c0c800e770dba430a6fc339820705298852f3012927259a482f683428b995b0da13ec53b3539ccc8d122c9b1550f23
- SSDEEP 1536:NORSD9g2Y1A3I4H517adPfEiwb8G8JmO/wfur4raXqp9AAPlhbV6:Lg2Ya3I4nafC83ofur6Mc93lh4
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 1904 3852 WerFault.exe 74
Processes
-
C:\Users\Admin\AppData\Local\Temp\7aaab376fadfa41853401aeb705326cd.exe"C:\Users\Admin\AppData\Local\Temp\7aaab376fadfa41853401aeb705326cd.exe"1⤵PID:3852
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3852 -s 2922⤵
- Program crash
PID:1904
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3852 -ip 38521⤵PID:2888