34cb15c6ea84fb60a5614eab3be63bf6710fc2b487d449f1c0b7b296d3a5cea4

Analysis

max time kernel
140s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 01:27

Target

SecuriteInfo.com.Win32.Trojan.PSE.1TYMTF4.9331.28700.exe
Size

1.2MB
MD5

f8e08cdc1198a4102f81192aadafb888
SHA1

2f5d2cc9b05ed3ad95e036aee98b68bf5fe8078d
SHA256

34cb15c6ea84fb60a5614eab3be63bf6710fc2b487d449f1c0b7b296d3a5cea4
SHA512

46cfe2faafef55741f82b5377e45dcd6fd398935ae5897e602fd22f5f29f5d8f79596fd0890e952892671d84332ee1ff4ce0f29a62322c9a29a39191958adf7b
SSDEEP

12288:3RwWiMnnJJ26KqHSL6EGWheSfoTOvZRNKY:3SWiym6lHS2EGWAS/RNf

Score

3^/10

Program crash 2 IoCs

Processes:

WerFault.exeWerFault.exe

pid	pid_target	process	target process
4252	2644	WerFault.exe	SecuriteInfo.com.Win32.Trojan.PSE.1TYMTF4.9331.28700.exe
4560	2644	WerFault.exe	SecuriteInfo.com.Win32.Trojan.PSE.1TYMTF4.9331.28700.exe

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.Trojan.PSE.1TYMTF4.9331.28700.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.Trojan.PSE.1TYMTF4.9331.28700.exe"
1⤵
PID:2644

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2644 -s 224
2⤵
- Program crash
PID:4252

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2644 -s 268
2⤵
- Program crash
PID:4560

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 2644 -ip 2644
1⤵
PID:3916

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 2644 -ip 2644
1⤵
PID:4136