Analysis
-
max time kernel
148s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
04/03/2024, 22:36
Behavioral task
behavioral1
Sample
b3459cc27b022a8804abc84d352c4518.exe
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
b3459cc27b022a8804abc84d352c4518.exe
Resource
win10v2004-20240226-en
2 signatures
150 seconds
General
-
Target
b3459cc27b022a8804abc84d352c4518.exe
-
Size
234KB
-
MD5
b3459cc27b022a8804abc84d352c4518
-
SHA1
dcecc186deaf7596316d929175dd662ccc743ef9
-
SHA256
dba50a7b827e25c75ff364efe19fc6efee39f2bef754675dc1bb9eec3933212c
-
SHA512
4b40681b398d1bbb410cab887fbef5e0c4e6c9982eafe5db4ab5a7d462512eab67bb6f2298a4cdde3491c63a967560b00ccdac624b1ecf1abe6202147a352d54
-
SSDEEP
3072:yBeh9YQd19pjts1iMJkw8rXgd5wXTUbZxak6ZR8Bgj5y/kssre7AZ9o6RtRncJsy:N/YQtpjtiD6jTTqZtbB8yMte7ArZ
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4944-0-0x0000000000DA0000-0x0000000000DEB000-memory.dmp upx -
Program crash 1 IoCs
pid pid_target Process procid_target 936 4944 WerFault.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\b3459cc27b022a8804abc84d352c4518.exe"C:\Users\Admin\AppData\Local\Temp\b3459cc27b022a8804abc84d352c4518.exe"1⤵PID:4944
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4944 -s 2282⤵
- Program crash
PID:936
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4944 -ip 49441⤵PID:4476