Analysis
- max time kernel
66s - max time network
59s - platform
windows10-2004_x64 - resource
win10v2004-20240419-en - resource tags
arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system - submitted
27/04/2024, 22:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6e61742d0ccebdff71926d911d296b7b.exe
Resource
win7-20240215-en
23 signatures
150 seconds
Behavioral task
behavioral2
Sample
6e61742d0ccebdff71926d911d296b7b.exe
Resource
win10v2004-20240419-en
1 signatures
150 seconds
General
- Target 6e61742d0ccebdff71926d911d296b7b.exe
- Size 347KB
- Sample240427-2fc2xaaa46
- SHA256 a9ca31f1703251ad8282dd252ceebb71ec3a69ed09948a56431f0678a41e7e61
- MD5 6e61742d0ccebdff71926d911d296b7b
- SHA1 7b4a71fa17317a10e9ec7dc3fbb09f85ec01c7e2
- SHA512 c4a188519fc9442933e9dba1c17edd7cfb670a0449065f97993cbefceb2743bb6572a2e6702cbb6563dc47e28ed1180fd1d08be41e0cfbaef714b2a162856bed
- SSDEEP 6144:ToBqFgnH6oK/xcYNKD8r+syjBJw45rtMLYC43J9fa7nxNHnKTV:EawahCYgD8CsKJw4/MchjCnMV
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 1952 852 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\6e61742d0ccebdff71926d911d296b7b.exe"C:\Users\Admin\AppData\Local\Temp\6e61742d0ccebdff71926d911d296b7b.exe"1⤵PID:852
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 852 -s 7242⤵
- Program crash
PID:1952
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 852 -ip 8521⤵PID:2560