Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
19/03/2024, 21:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d71f038548bb72deadc2d26de64cbf34.exe
Resource
win7-20240220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
d71f038548bb72deadc2d26de64cbf34.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
d71f038548bb72deadc2d26de64cbf34.exe
-
Size
904KB
-
MD5
d71f038548bb72deadc2d26de64cbf34
-
SHA1
fa50c47d00928103ef830a443393c8924b32a925
-
SHA256
e6a4234417da77f9bd83b07a8001937e74d65a4ab611d25b4a91ae4b307feea2
-
SHA512
96084b7d2033209c1a09a0209ac8153e1ee6ac99acd2122d9d0b1031d814db332a5ffd53c4c9a02bc8f45cf67a2a3f8bf322e5e7ec36c44e80b5a8cf20380a5a
-
SSDEEP
3072:ft2cWtTBfVkfqM2SCAygRjlIqZoFzJcqLZ:hWtTBdsqEPxjjoFzVZ
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2200 3372 WerFault.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\d71f038548bb72deadc2d26de64cbf34.exe"C:\Users\Admin\AppData\Local\Temp\d71f038548bb72deadc2d26de64cbf34.exe"1⤵PID:3372
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3372 -s 2162⤵
- Program crash
PID:2200
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 3372 -ip 33721⤵PID:1724