Analysis
- max time kernel
150s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
28/02/2024, 05:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ab2a311d100aa80b01d5d2eb8ae7eccc.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ab2a311d100aa80b01d5d2eb8ae7eccc.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
- Target ab2a311d100aa80b01d5d2eb8ae7eccc.exe
- Size 110KB
- Sample240228-gndcescg95
- SHA256 2da7ed5c5d13f06d453a86e2382f7c77fe0c0717671a8bed18957c5c7cc77c11
- MD5 ab2a311d100aa80b01d5d2eb8ae7eccc
- SHA1 be3f66143714e02541a61577a660f29d6ae28a2f
- SHA512 86117dc963abeae5a4b9f717603a712a1c25b649f48b4a9c39ac6d04f1773a1090578b99bfd9f39f3e951ac8afc8b17136a7d377e5c389f085dfcec0f287cd5d
- SSDEEP 3072:zkZqlIx536iXgdEAtlg1lKDzVs2MVJ11j:QJhhAtGOMVJ
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4696 2168 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\ab2a311d100aa80b01d5d2eb8ae7eccc.exe"C:\Users\Admin\AppData\Local\Temp\ab2a311d100aa80b01d5d2eb8ae7eccc.exe"1⤵PID:2168
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2168 -s 2242⤵
- Program crash
PID:4696
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 2168 -ip 21681⤵PID:1144