Analysis
-
max time kernel
142s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
22-04-2024 11:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SpaceInfo.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
SpaceInfo.exe
Resource
win10v2004-20240412-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
SpaceInfo.exe
-
Size
11KB
-
MD5
9dbc8f4b5a2b9a8dfc4b04b2d4371cfb
-
SHA1
3d57e9e616365b4312744f03ce68746450bfb387
-
SHA256
5fbb9e411fa3a0899de205980351ca1d175ffb25b3eadfcc21ee9e78a3c20683
-
SHA512
f83e3d0637dfe94595711dfb856cf53a9d4d29ead9db89ab814269900a572a54f61a1a9bc11445e0e59209ee488b8c1addd0de75d0e12f946ac568d9f8694f4a
-
SSDEEP
192:3VPXz05OVprL2a0+2nXeFXJ9LL3LKLLfwOgh5pJXkj9fGDgT:3RBprL2a0nXc59LL3LKLjwvHkfmg
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1228 3992 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\SpaceInfo.exe"C:\Users\Admin\AppData\Local\Temp\SpaceInfo.exe"1⤵PID:3992
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3992 -s 10122⤵
- Program crash
PID:1228
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3992 -ip 39921⤵PID:3656