Analysis
- max time kernel
129s - max time network
145s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
28/02/2024, 09:22
Behavioral task
behavioral1
Sample
ab8d0148f20516984cae570efcb3a1d0.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ab8d0148f20516984cae570efcb3a1d0.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
- Target ab8d0148f20516984cae570efcb3a1d0.exe
- Size 68KB
- Sample240228-lcavdagb2y
- SHA256 96e4d0e21f9803139966fe05089198e94f7063fafaf5ced32f158f015e024976
- MD5 ab8d0148f20516984cae570efcb3a1d0
- SHA1 ce0d788c712e01f03fd4473ebb8cd79d2e1d8c8f
- SHA512 63e92661b7fb5eee982291b636847813aa135ec724601620d7758785ae81f66a11a98914e596a07e61b3f6b8348b7d84d91d96c565188743317e053ca60fd718
- SSDEEP 1536:2pbQWekPQcyP3/7rZ4ZbsgBubVO/5ysA6CRje:2pFDorZvOmVEc6CR6
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4228 4092 WerFault.exe 42
Processes
-
C:\Users\Admin\AppData\Local\Temp\ab8d0148f20516984cae570efcb3a1d0.exe"C:\Users\Admin\AppData\Local\Temp\ab8d0148f20516984cae570efcb3a1d0.exe"1⤵PID:4092
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4092 -s 2282⤵
- Program crash
PID:4228
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 4092 -ip 40921⤵PID:4676