Analysis
- max time kernel
138s - max time network
144s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
08/03/2024, 16:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bbba3e0bacf1aeaf7bd0d8fbdbe14c06.exe
Resource
win7-20240221-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
bbba3e0bacf1aeaf7bd0d8fbdbe14c06.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
- Target bbba3e0bacf1aeaf7bd0d8fbdbe14c06.exe
- Size 184KB
- Sample240308-tzqhcace71
- SHA256 f3c237fa05a5229a144e121a61ae7f56d5e2c4e5fff5598f079d894a230a7b1d
- MD5 bbba3e0bacf1aeaf7bd0d8fbdbe14c06
- SHA1 f251fee3bdb6594cd2a187843434552d14b1c8f8
- SHA512 9ec50d35dba7f6c6c10ee954240b04292e52a6d8d95b794f5ab6b4d48d0a8280aaa56123b77ffc7b0ad193966bd10b08c0a8c3a31929ca37993a7c3e8eb3c860
- SSDEEP 3072:xuRromuxcOAEdmjoMhLrc8AMEXYMTxXMdk7xKDPeVylPvpFR:xuhowDEdfMlrc8M8BiylPvpF
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4708 5092 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\bbba3e0bacf1aeaf7bd0d8fbdbe14c06.exe"C:\Users\Admin\AppData\Local\Temp\bbba3e0bacf1aeaf7bd0d8fbdbe14c06.exe"1⤵PID:5092
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5092 -s 2242⤵
- Program crash
PID:4708
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 5092 -ip 50921⤵PID:4752