Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
05-03-2024 18:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b565e39e36284365941268ef2d71cf4e.exe
Resource
win7-20240221-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
b565e39e36284365941268ef2d71cf4e.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
b565e39e36284365941268ef2d71cf4e.exe
-
Size
184KB
-
MD5
b565e39e36284365941268ef2d71cf4e
-
SHA1
866c94ddf79065b4f40aa6fa758eb62a8bca441b
-
SHA256
8293fa2df6773e12cce547fa610881b9c740ab8b44a0456e8fe25e4e0c2a465c
-
SHA512
f8f8a37802394c32bab69046b2b5b02a8aa2eb236acd13ebb26434998bfcc4e7fd53bcdb0846d809a54cfb125ea489cc41220cb69929c86d5e7bcd8e735cca42
-
SSDEEP
3072:0PmBo98H4DA85OjndTsWI8hb6ZM6iOgiWDExXMPmsNlPvpFh:0P8ox885QdoWI8s/ZmNlPvpF
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1808 772 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\b565e39e36284365941268ef2d71cf4e.exe"C:\Users\Admin\AppData\Local\Temp\b565e39e36284365941268ef2d71cf4e.exe"1⤵PID:772
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 772 -s 2162⤵
- Program crash
PID:1808
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 772 -ip 7721⤵PID:3208