Analysis
- max time kernel
150s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
05/03/2024, 08:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b438d01b1acaf67a0b8f4d551c9ccac2.exe
Resource
win7-20240215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
b438d01b1acaf67a0b8f4d551c9ccac2.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
- Target b438d01b1acaf67a0b8f4d551c9ccac2.exe
- Size 123KB
- Sample240305-j2selsbb44
- SHA256 8a7198752ccbd4d58f69fcfe7be662a38e70aedb1af009c7d731d9d7dc26bc9c
- MD5 b438d01b1acaf67a0b8f4d551c9ccac2
- SHA1 61b427464ba00f795840450d2897ae1fda65a0a4
- SHA512 f656a11c78affd51b859e9a8f9d11eb9983f3971c89d5719396f35a57ef3d05b273aa41d03d28fb6ba5200667b8e938d855140d1e51bb0fe5f5ef0e2928e2d31
- SSDEEP 3072:fRtWIJ0IyRWEqv5F3x/3XXcP7+0nN0RoOy4hmsy:fRtLeWEqv5F3x/3XG7DnNXOy48sy
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4940 3356 WerFault.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\b438d01b1acaf67a0b8f4d551c9ccac2.exe"C:\Users\Admin\AppData\Local\Temp\b438d01b1acaf67a0b8f4d551c9ccac2.exe"1⤵PID:3356
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3356 -s 2242⤵
- Program crash
PID:4940
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3356 -ip 33561⤵PID:4748