Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
25/03/2024, 13:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
de1e08742e1d5777210a62595aba9b06.exe
Resource
win7-20240215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
de1e08742e1d5777210a62595aba9b06.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
de1e08742e1d5777210a62595aba9b06.exe
-
Size
272KB
-
MD5
de1e08742e1d5777210a62595aba9b06
-
SHA1
36a1e23f9fda23f2f7a60cf04bafa8514a52470b
-
SHA256
a9e659631eb19539f7346364ab555d65f406afc09ae67dff120d880c0f221211
-
SHA512
b94b6050279c18bb4dc2880ca4bd44a3d438f8ef7ab59c5e62bbf40baeda30023f6254a9676f6b5c1e7f76ef89c60273241a4f5bd48ab0a7657f7f4fd4799ae6
-
SSDEEP
6144:dNbjCQ7pR230OYw0PlWOyuF5wPoQYYyTPVBREgL:dZjHpR230RlWOyEwPoQYFTPPugL
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5904 2984 WerFault.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\de1e08742e1d5777210a62595aba9b06.exe"C:\Users\Admin\AppData\Local\Temp\de1e08742e1d5777210a62595aba9b06.exe"1⤵PID:2984
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2984 -s 3322⤵
- Program crash
PID:5904
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 2984 -ip 29841⤵PID:6032