Analysis
-
max time kernel
147s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
28-02-2024 10:55
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
abb6759910762490f14732725a13f7bd.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
abb6759910762490f14732725a13f7bd.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
abb6759910762490f14732725a13f7bd.exe
-
Size
1.6MB
-
MD5
abb6759910762490f14732725a13f7bd
-
SHA1
f23de5801b1eb31a64e25704fb2a59a1a08bc0be
-
SHA256
cb8e7e567b6d898cc7c08f9c0a9bcfa9dc6fadbb665001075f2fd031cde06c9c
-
SHA512
c9ed97ac6f54812e79d047dea177dc0d39afd358eca8516b0f316d9134df7b809ccf54368bb2899486800161bbab7eef54e4c8a838c88cb8bcc837a520a615a9
-
SSDEEP
49152:gTUYQgyrdHojE9/LpY6p2U58yyE/Kd/bj:gwY/KIjE9DpkU5F/w
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2692 3236 WerFault.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\abb6759910762490f14732725a13f7bd.exe"C:\Users\Admin\AppData\Local\Temp\abb6759910762490f14732725a13f7bd.exe"1⤵PID:3236
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3236 -s 4922⤵
- Program crash
PID:2692
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3236 -ip 32361⤵PID:4400