Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
19/03/2024, 05:17
Behavioral task
behavioral1
Sample
2fdba6e1f13d637ddf75cb3f3f9de3331f0cefc2be100764c8b413778b1280f5.exe
Resource
win7-20240221-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2fdba6e1f13d637ddf75cb3f3f9de3331f0cefc2be100764c8b413778b1280f5.exe
Resource
win10v2004-20240226-en
2 signatures
150 seconds
General
-
Target
2fdba6e1f13d637ddf75cb3f3f9de3331f0cefc2be100764c8b413778b1280f5.exe
-
Size
63KB
-
MD5
b8b7ccadb7836f230e6eba6699646cfd
-
SHA1
cb21e7674a8e046c69028b781a06fc2ae576b434
-
SHA256
2fdba6e1f13d637ddf75cb3f3f9de3331f0cefc2be100764c8b413778b1280f5
-
SHA512
70de704ba3f9b7e1c17d242a1b96f60ff490d5dcf3f82bffbef521719a1a7e7b3e32e9d2ce3a327213f30b148493b3f27a8716fa9f3535e7009155f393a13149
-
SSDEEP
1536:MHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVt/2+AJG:MHoLde/OgV432UcP39hXJZn/5A0
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/636-0-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/636-1-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/636-2-0x0000000000400000-0x0000000000429000-memory.dmp upx -
Program crash 1 IoCs
pid pid_target Process procid_target 368 636 WerFault.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\2fdba6e1f13d637ddf75cb3f3f9de3331f0cefc2be100764c8b413778b1280f5.exe"C:\Users\Admin\AppData\Local\Temp\2fdba6e1f13d637ddf75cb3f3f9de3331f0cefc2be100764c8b413778b1280f5.exe"1⤵PID:636
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 636 -s 3882⤵
- Program crash
PID:368
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 636 -ip 6361⤵PID:2200