Analysis
- max time kernel
148s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20240419-en - resource tags
arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system - submitted
27/04/2024, 23:11
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7d48de28964c78a94134e9dcc0add15a.exe
Resource
win7-20240221-en
23 signatures
150 seconds
Behavioral task
behavioral2
Sample
7d48de28964c78a94134e9dcc0add15a.exe
Resource
win10v2004-20240419-en
1 signatures
150 seconds
General
- Target 7d48de28964c78a94134e9dcc0add15a.exe
- Size 452KB
- Sample240427-259geaah71
- SHA256 1718b48bc644fdac22b236a4a2ffb3b2ab2050853946865f843d52535e79711c
- MD5 7d48de28964c78a94134e9dcc0add15a
- SHA1 c5c0448c15109d4abd806c8812156145406c2cdd
- SHA512 8df5bc3cf18da8ffc313dff07e3e85023245b0bc58e96b0c501ff476949901b04bafdbc0f1c307bec1c0717b361bf408f21fc1a7a1af2843f7aa7ec738609a51
- SSDEEP 6144:yqLtuGCSTaLZ4Bz5iNrmY4+wqKKxsnF4rclsMoSkRywnQts4lX:yWtrlXI14qdxsn7T14N4lX
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 2312 4804 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\7d48de28964c78a94134e9dcc0add15a.exe"C:\Users\Admin\AppData\Local\Temp\7d48de28964c78a94134e9dcc0add15a.exe"1⤵PID:4804
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4804 -s 6962⤵
- Program crash
PID:2312
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4804 -ip 48041⤵PID:3676