Analysis
-
max time kernel
135s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
02/02/2024, 22:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
VirusShare-006df5e8b5a0fd87c1fa32103cce8cab.exe
Resource
win7-20231215-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
VirusShare-006df5e8b5a0fd87c1fa32103cce8cab.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
VirusShare-006df5e8b5a0fd87c1fa32103cce8cab.exe
-
Size
1.3MB
-
MD5
006df5e8b5a0fd87c1fa32103cce8cab
-
SHA1
d377908fd9e5dfe6fe297f204b01d6565a7475b8
-
SHA256
b5ba9725a503b5d0c6b59c554911b946d80d5bba3c6dbbf0d5622a8983753c3f
-
SHA512
2fe7ddc29a92e32731c97797c36791af9d201f1e3033d7afa3253970d96a2567f062757fff05742c787ce595ec4715b5dcc0970a3b19c3b9550f5d94f2955d01
-
SSDEEP
24576:Z/rA2+ijQ5HAQvvc3ZEoKK07WLdgblzMW4dDbDDa7/:Z/bjoPk7rWGgblzMW0DbCr
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 948 1516 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\VirusShare-006df5e8b5a0fd87c1fa32103cce8cab.exe"C:\Users\Admin\AppData\Local\Temp\VirusShare-006df5e8b5a0fd87c1fa32103cce8cab.exe"1⤵PID:1516
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1516 -s 2762⤵
- Program crash
PID:948
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 1516 -ip 15161⤵PID:1124