Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
28/02/2024, 01:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
aaa10cba788f42936070d40d9bb4fab2.exe
Resource
win7-20240221-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
aaa10cba788f42936070d40d9bb4fab2.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
aaa10cba788f42936070d40d9bb4fab2.exe
-
Size
181KB
-
MD5
aaa10cba788f42936070d40d9bb4fab2
-
SHA1
5582347f59982a6931368c3558da984bfa10d3fd
-
SHA256
b83260271c2a15c9a9897cf1282b0bbf9b62869626acd19524d2f9526ca62463
-
SHA512
5596f3f64cd4e8cb20f983c2e46f2fcc8cf52ffe9fa73209b15e5ece5ab6731e8ced674dcf329916cd9c1ab5f66f554e4cc0104a80bd4ebd9d06a52216cf233e
-
SSDEEP
3072:29OcuckUcf5wrX6G2PtDVMeREU7ytPpyyd/isIDvC2yKG5lJFkK:4OT5SrXf9UGehvC3FkK
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3076 3768 WerFault.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\aaa10cba788f42936070d40d9bb4fab2.exe"C:\Users\Admin\AppData\Local\Temp\aaa10cba788f42936070d40d9bb4fab2.exe"1⤵PID:3768
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3768 -s 4642⤵
- Program crash
PID:3076
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 3768 -ip 37681⤵PID:4576