Analysis
-
max time kernel
136s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
03-02-2024 05:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8b8da82499438c53f17cafe74e5e672f.exe
Resource
win7-20231215-en
windows7-x64
1 signatures
150 seconds
General
-
Target
8b8da82499438c53f17cafe74e5e672f.exe
-
Size
324KB
-
MD5
8b8da82499438c53f17cafe74e5e672f
-
SHA1
b6db6c98f6636808a2b720db3da2533722efff6f
-
SHA256
56848946dec883b076cc7fa364f2b55c5ee1e5991f3cccc5522f099d44c6c061
-
SHA512
26723a8a34ece3613ab41a09dd46759724b9b16bd5c74d79f45e33f4bbefae5b45a66050c214a722d1684aaa5ec6252aaa366fd112aacb633006fd1513d56dbf
-
SSDEEP
6144:u9NXvkyRZWnb9kb75DiMKCroE7bVG9WfJy7ur9eO6n:mvk6ZWnudDiMKCEE/VNMOU
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\8b8da82499438c53f17cafe74e5e672f.exe"C:\Users\Admin\AppData\Local\Temp\8b8da82499438c53f17cafe74e5e672f.exe"1⤵PID:880
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 880 -s 5522⤵
- Program crash
PID:2320
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 880 -ip 8801⤵PID:4372