Analysis
-
max time kernel
150s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
19-03-2024 23:11
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d74fdf881569d1758324b95388799e74.exe
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
d74fdf881569d1758324b95388799e74.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
d74fdf881569d1758324b95388799e74.exe
-
Size
235KB
-
MD5
d74fdf881569d1758324b95388799e74
-
SHA1
31cfee2e0a99d108793f6ab586b4eaf4109dad52
-
SHA256
f130d0599da554da601641446a688d5b3684837274186282b7355b1c75b2f7fc
-
SHA512
4dcce9e99f81ad568e80ab34424cb003c36c0711b134952d32dd2c2ccef7ae1c9a76b74bb2ff4ec9fb067c3845b64d983f21de95b7c1f0f950f1c8fd9fff70e6
-
SSDEEP
6144:e7R5L/pSz4YIkm59jYx8bJ/1m6SORnIr0RiApxfyluXs93:snuO759K8bJ9m63c0Ri2ByCM3
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3688 3156 WerFault.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\d74fdf881569d1758324b95388799e74.exe"C:\Users\Admin\AppData\Local\Temp\d74fdf881569d1758324b95388799e74.exe"1⤵PID:3156
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3156 -s 2242⤵
- Program crash
PID:3688
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3156 -ip 31561⤵PID:3608