Analysis
- max time kernel
146s - max time network
157s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
05/03/2024, 13:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b4c44bbc343dd78008fbcf8773577375.exe
Resource
win7-20240221-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
b4c44bbc343dd78008fbcf8773577375.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
- Target b4c44bbc343dd78008fbcf8773577375.exe
- Size 324KB
- Sample240305-qcmldsfe41
- SHA256 d58f550bfa1c9dde91e0e02b50f7a94680d4e0056de3a01fbb4523c427f31c98
- MD5 b4c44bbc343dd78008fbcf8773577375
- SHA1 7ba5fe5207e6906cd32841192226da6b140e683e
- SHA512 66a96aac74ae707cb6fd4fc8c4c761338f6c0607e090a94028ef5cf7b439b5c5fe65e099af2deb67c0e1570116d42047a746fc37a883c36125f6b24fadd3eeee
- SSDEEP 6144:Z8Nf8oK0zat8GzwzkIXfYnPY9lrhdMwPTz0NXYoK0zaGgYgia:ZCJK0qjIQnAYwP8K0aBia
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 1436 3088 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\b4c44bbc343dd78008fbcf8773577375.exe"C:\Users\Admin\AppData\Local\Temp\b4c44bbc343dd78008fbcf8773577375.exe"1⤵PID:3088
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3088 -s 4082⤵
- Program crash
PID:1436
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 3088 -ip 30881⤵PID:1832