Analysis
-
max time kernel
147s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
19-03-2024 12:27
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d61d0abd67faa11961cbd9c3e3c2cf17.exe
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
d61d0abd67faa11961cbd9c3e3c2cf17.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
d61d0abd67faa11961cbd9c3e3c2cf17.exe
-
Size
501KB
-
MD5
d61d0abd67faa11961cbd9c3e3c2cf17
-
SHA1
1607d74f72564dcef7643eabe8df816ccb947ddc
-
SHA256
45548276619848f7b73ef513b90598a9a253e80900a33599bfab8d1c5d7ef464
-
SHA512
7e5aa2d3f5fbec4333ec85a1460e0e84b356db6a43c0d7c28b8590cccbf96d68edaa576464e591b0d5653aff3034cd8681e22bb17007e87e63e54f365dee7db9
-
SSDEEP
6144:cl81M+bAyKBG95/1/LbgbBXn3RgjaqLlOsJXDuHCtkkpwBLGTOLZNr5uv+5drArm:iiXbBKBw/1/nSap4YKTLGTOLpeOA7W
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4484 2412 WerFault.exe 87 2496 2412 WerFault.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\d61d0abd67faa11961cbd9c3e3c2cf17.exe"C:\Users\Admin\AppData\Local\Temp\d61d0abd67faa11961cbd9c3e3c2cf17.exe"1⤵PID:2412
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2412 -s 5362⤵
- Program crash
PID:4484
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2412 -s 5722⤵
- Program crash
PID:2496
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2412 -ip 24121⤵PID:5076
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 2412 -ip 24121⤵PID:4212