Analysis
-
max time kernel
143s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
05/03/2024, 23:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b5f11fcdc64487ba5baff7d51e0bb7ca.exe
Resource
win7-20240221-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
b5f11fcdc64487ba5baff7d51e0bb7ca.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
b5f11fcdc64487ba5baff7d51e0bb7ca.exe
-
Size
187KB
-
MD5
b5f11fcdc64487ba5baff7d51e0bb7ca
-
SHA1
2c0aa295be6051d088da4132cea782835d186d17
-
SHA256
03adaeb466daf32db9a0a2e63e312cbd1ad4d3d408bca1bb35c5d35448b89795
-
SHA512
70d2d204f3e02b8c8cd01640067a263fa0770e8203867113239201d149495b263c23b5994b165f3de87aae13e0b38d034d1753802d2175d55ccd13530fd8969a
-
SSDEEP
3072:YugxuqbZ/wtdNrl/eFYUnuZFXQKg5lZfzKTVbA/w4jvHgNx21otHD9eL:Y9UqbkdRlkiZ6KIb7vw47AN0S
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2780 3564 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\b5f11fcdc64487ba5baff7d51e0bb7ca.exe"C:\Users\Admin\AppData\Local\Temp\b5f11fcdc64487ba5baff7d51e0bb7ca.exe"1⤵PID:3564
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3564 -s 3882⤵
- Program crash
PID:2780
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 3564 -ip 35641⤵PID:4028