Analysis
-
max time kernel
143s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
21-03-2024 11:46
Behavioral task
behavioral1
Sample
db8ce55e9c115289f6c159ac36a220aa.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
db8ce55e9c115289f6c159ac36a220aa.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
db8ce55e9c115289f6c159ac36a220aa.exe
-
Size
185KB
-
MD5
db8ce55e9c115289f6c159ac36a220aa
-
SHA1
87f72745efbac39470d3a52f3b6e3ef84f365412
-
SHA256
e792148020d2d6e3498bebe16a493ecf01b01723b64c979ba4a811b05f6b7ef6
-
SHA512
3e44dcaba30e1c8e01137bed4164cefb8fef18fb5815e4eeee7d7c4402b07f61e918ff9524ca9871c5573d8dfac7b987bcc400b72d6738e41df7a304fc9cece2
-
SSDEEP
3072:YUsHrsGfPyJ95sW9Pyky8zOCbDLKyM6wMkit0wua4Do:Y7LvGMky8SCPtMmswEo
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3608 3156 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\db8ce55e9c115289f6c159ac36a220aa.exe"C:\Users\Admin\AppData\Local\Temp\db8ce55e9c115289f6c159ac36a220aa.exe"1⤵PID:3156
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3156 -s 2682⤵
- Program crash
PID:3608
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3156 -ip 31561⤵PID:500