Analysis
- max time kernel
142s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
07/03/2024, 23:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b9e84e60c8c5e28a5db22594e42ad804.exe
Resource
win7-20240221-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
b9e84e60c8c5e28a5db22594e42ad804.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
- Target b9e84e60c8c5e28a5db22594e42ad804.exe
- Size 226KB
- Sample240307-28aggshg6v
- SHA256 d8669f41b601fdeb261bda9bf548fb191a899b69ce6d3cbc60335a49b8db73a3
- MD5 b9e84e60c8c5e28a5db22594e42ad804
- SHA1 d9d8ede582c2f2dfe4b8b46b42610fe0805c5bbd
- SHA512 0f80c53ed6e822c684bdfe3d4f379bf6d1df69fb1710b517165e4c4ce5972aa9702910f8bcf0cbaeb85b91d564ccc31428e0d7c6aa022ae8c1a3c4599c4fff0a
- SSDEEP 6144:ZbNYkdekUS+m+5Jf3GbZl+TZkGz8lgz66Y:ZbNYkAkAmUJfgUZkGzKg
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 2644 844 WerFault.exe 90
Processes
-
C:\Users\Admin\AppData\Local\Temp\b9e84e60c8c5e28a5db22594e42ad804.exe"C:\Users\Admin\AppData\Local\Temp\b9e84e60c8c5e28a5db22594e42ad804.exe"1⤵PID:844
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 844 -s 4882⤵
- Program crash
PID:2644
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 844 -ip 8441⤵PID:1364