Analysis
-
max time kernel
92s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
13-02-2024 12:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9963b2bd0288ca6b4017b1a9f6900314.exe
Resource
win7-20231129-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
9963b2bd0288ca6b4017b1a9f6900314.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
9963b2bd0288ca6b4017b1a9f6900314.exe
-
Size
27KB
-
MD5
9963b2bd0288ca6b4017b1a9f6900314
-
SHA1
9c224beda0735de825b21d86c60e39f6b9003c31
-
SHA256
928761f0f61131cea7f50f618b1e77383225e666f560db7fa272bd4b71553ae4
-
SHA512
966bf4454c9d0757453b0193e560178e298a2be0713ff1d1f9d446aaf34e1664ecd00c9241b93935a35f644e5715c037dc527589b0073c127500660bdf86cb5e
-
SSDEEP
768:xpT3GEXV1UnnvGtUBNQuyRD4Mg2OR8bzjaK36tAesVx8xzKLrqaY:HGEF6nuiDGVYSPmtxwx8xz6a
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\nzxpobsc.sys 9963b2bd0288ca6b4017b1a9f6900314.exe File created C:\Windows\SysWOW64\NTNZxBBK.dll 9963b2bd0288ca6b4017b1a9f6900314.exe -
Program crash 1 IoCs
pid pid_target Process procid_target 2536 4640 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\9963b2bd0288ca6b4017b1a9f6900314.exe"C:\Users\Admin\AppData\Local\Temp\9963b2bd0288ca6b4017b1a9f6900314.exe"1⤵
- Drops file in System32 directory
PID:4640 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4640 -s 3322⤵
- Program crash
PID:2536
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4640 -ip 46401⤵PID:880