Analysis
- max time kernel
150s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
21/03/2024, 16:07
Behavioral task
behavioral1
Sample
dc0b6f96b26f89d1a9dead314f71ce9d.exe
Resource
win7-20240220-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
dc0b6f96b26f89d1a9dead314f71ce9d.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
- Target dc0b6f96b26f89d1a9dead314f71ce9d.exe
- Size 658KB
- Sample240321-tk2basgg5w
- SHA256 a963137b4dfe41e59a0316259aa4f2fc4885f4fc92e5f3655b8808fdf11721bb
- MD5 dc0b6f96b26f89d1a9dead314f71ce9d
- SHA1 e7d344ac6f4397fc06d98eb909d8af04f18f0f45
- SHA512 f13664312242b5097ffd3ca8e823249e78a84c9df01d899176dd65e33c681e6adfee3bb90d5bd712ef00e4076e5d22f4197e59a8ccbd3f06c3a40f67bcc76169
- SSDEEP 12288:rXyTAFlAd0Z+89cxTGzO4AucTD8QP2lmFSrVs9LqnKV9:ryAQ6Zx9cxTmOrucTIEFSpOGE9
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4376 1132 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\dc0b6f96b26f89d1a9dead314f71ce9d.exe"C:\Users\Admin\AppData\Local\Temp\dc0b6f96b26f89d1a9dead314f71ce9d.exe"1⤵PID:1132
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1132 -s 802⤵
- Program crash
PID:4376
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1132 -ip 11321⤵PID:4464