Analysis
-
max time kernel
150s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
29/02/2024, 07:06
Behavioral task
behavioral1
Sample
adf9edfb64a39411235b79e85010e278.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
adf9edfb64a39411235b79e85010e278.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
adf9edfb64a39411235b79e85010e278.exe
-
Size
73KB
-
MD5
adf9edfb64a39411235b79e85010e278
-
SHA1
1e9a32879dda087bcaaef1d7d07e75a574bb6197
-
SHA256
8185eaca839b5ff49a6475051437f9f17ccf3d89f0a5365ef88c8d7b1239e959
-
SHA512
493f79510d16f7df4994349e4658c89cb1810a6faf025529df264061f8ac7db36ab0e07aa508ce712d0e50e28b217460d39734bcd88169f780d840963db9cbb2
-
SSDEEP
1536:kCxKOBJyypgmDzV2NSQ85GdSu62Cnts1LxgUKL:/nyypmMGdSu51eUKL
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 3556 2412 WerFault.exe 84 3284 2412 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\adf9edfb64a39411235b79e85010e278.exe"C:\Users\Admin\AppData\Local\Temp\adf9edfb64a39411235b79e85010e278.exe"1⤵PID:2412
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2412 -s 2522⤵
- Program crash
PID:3556
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2412 -s 2642⤵
- Program crash
PID:3284
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2412 -ip 24121⤵PID:1932
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 488 -p 2412 -ip 24121⤵PID:4944