Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
16-03-2024 09:40
Behavioral task
behavioral1
Sample
cdb98dd2476e88aa64ae9eaaf620fe01.exe
Resource
win7-20240215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
cdb98dd2476e88aa64ae9eaaf620fe01.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
cdb98dd2476e88aa64ae9eaaf620fe01.exe
-
Size
3.6MB
-
MD5
cdb98dd2476e88aa64ae9eaaf620fe01
-
SHA1
5fc5981b9fe0551bcfa9e829ebbbbdc62729ef9c
-
SHA256
66d013b6fa644e65465e52c644ab7d183fad81239149169e844615240f14c79b
-
SHA512
618b7cf9e4f04f3b992d4d919fb7cbec2e085edf6610d94c6b981f51df3f6454e39f2d24010d3be2db5fb193a37154bc7372e96bc4bf87e29c062e946bc829a7
-
SSDEEP
49152:zAdGB73ejP3+EMfRdASVaAvrN5Xh602+/:zAgR3epMjASHPht
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3324 484 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\cdb98dd2476e88aa64ae9eaaf620fe01.exe"C:\Users\Admin\AppData\Local\Temp\cdb98dd2476e88aa64ae9eaaf620fe01.exe"1⤵PID:484
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 484 -s 2762⤵
- Program crash
PID:3324
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 484 -ip 4841⤵PID:4256