Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
08/03/2024, 00:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ba0207ef8ee7aff3080a0b4fc4d9562f.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ba0207ef8ee7aff3080a0b4fc4d9562f.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
ba0207ef8ee7aff3080a0b4fc4d9562f.exe
-
Size
121KB
-
MD5
ba0207ef8ee7aff3080a0b4fc4d9562f
-
SHA1
15941495929262dca850029abcfee7f5f0e67bcb
-
SHA256
65f96f6643b6272056fc72e656f41245f10ff09ee28d42a3a5870bc22c5f79a7
-
SHA512
3e106fbfac471c1637b519b4a3cd1ec46cd2244c47f497e302c3885d67cdf949f60dbf6876806d7f20a72d67645951875ce33dbd9825375f700b38ff44f03115
-
SSDEEP
3072:4XQlA/oTgGLFZOGjIqRA1503Dr30vy5fFjNap3xQ44:uQlDHLy2V21503DrkkgI
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4776 4564 WerFault.exe 89
Processes
-
C:\Users\Admin\AppData\Local\Temp\ba0207ef8ee7aff3080a0b4fc4d9562f.exe"C:\Users\Admin\AppData\Local\Temp\ba0207ef8ee7aff3080a0b4fc4d9562f.exe"1⤵PID:4564
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4564 -s 2242⤵
- Program crash
PID:4776
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4564 -ip 45641⤵PID:2836