Analysis
- max time kernel
152s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
05/03/2024, 18:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b556d0cd7d4fe641de519af05151f7be.exe
Resource
win7-20240221-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
b556d0cd7d4fe641de519af05151f7be.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
- Target b556d0cd7d4fe641de519af05151f7be.exe
- Size 212KB
- Sample240305-ws5d2adc7y
- SHA256 907fddfa4a2f8864e7ad3135918817a4ac59c788a86991d68958ff225b276bcb
- MD5 b556d0cd7d4fe641de519af05151f7be
- SHA1 5bde460135c819538e58e94aeb78673135deae69
- SHA512 1f7d71d1e16ddb380d7e04091774c6c5e4a7418acded9cfbeb037d42e2987f9ee43102ff3cfd4fd07dd5e9eca28d5902a096d4f02fbeae8e68bf63588036f381
- SSDEEP 3072:eFi8HjA0eyxE+ImzcBE61mm+jLX1j5IhrO5PqHQh:egyTE+ICch011Myy
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 3720 2392 WerFault.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\b556d0cd7d4fe641de519af05151f7be.exe"C:\Users\Admin\AppData\Local\Temp\b556d0cd7d4fe641de519af05151f7be.exe"1⤵PID:2392
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2392 -s 4722⤵
- Program crash
PID:3720
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 2392 -ip 23921⤵PID:5060