Analysis
-
max time kernel
139s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
07/03/2024, 13:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b8d39e0860c988151756c485b1690cf5.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
b8d39e0860c988151756c485b1690cf5.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
b8d39e0860c988151756c485b1690cf5.exe
-
Size
124KB
-
MD5
b8d39e0860c988151756c485b1690cf5
-
SHA1
75f9bc12109ed7c7878ee7da29853bdc7d4f6c23
-
SHA256
40de881392ca8f57008d906461b4ad04ab5ebec2d204d4ac586f586b19101fb4
-
SHA512
c57ffa88fe1744cfe16882365f7b151bfeed187ce9a5339e1189e7156254b65ec9cc6937c9af45bb5eb495ac1985347092c95fe64cebd7702c41c07075fa1962
-
SSDEEP
1536:zLM+azMAjzsugXY3kFq+FZbU4hO8gt+jlvBR8WtBw2TVl127I42cm42mXA2J9aBO:XnazMAjzuYx8IT+jzRHtWeJ2v23o9L
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2624 1056 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\b8d39e0860c988151756c485b1690cf5.exe"C:\Users\Admin\AppData\Local\Temp\b8d39e0860c988151756c485b1690cf5.exe"1⤵PID:1056
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1056 -s 2842⤵
- Program crash
PID:2624
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1056 -ip 10561⤵PID:1196