Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
25-05-2024 09:54
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20231129-en
2 signatures
150 seconds
General
-
Target
file.exe
-
Size
355KB
-
MD5
8a848d90a8d7a8c79b80d2dd8d330d9d
-
SHA1
6694c6e16123598f1665b7c68da40fd342e683fa
-
SHA256
42f7ec36e07bca91cfa99c9b5a1643a7674e4af4c93905a993eab902e0bfa70d
-
SHA512
d67683611a368964d4dbc2ed85c9c458e5502cc8fb50608ef184cdb574e55636f800c471f8224b1fe82874175f9802d07a8dacdac5eeb73bd72a35bb7b71d54e
-
SSDEEP
6144:FHAqyjjclaS6sR38CS0iD7RjPyvB7m2Rx6PLfciHid4Fwem:JAqyjjmK06ByZ7m2yee
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1468 2040 WerFault.exe file.exe -
Suspicious use of WriteProcessMemory 4 IoCs
Processes:
file.exedescription pid process target process PID 2040 wrote to memory of 1468 2040 file.exe WerFault.exe PID 2040 wrote to memory of 1468 2040 file.exe WerFault.exe PID 2040 wrote to memory of 1468 2040 file.exe WerFault.exe PID 2040 wrote to memory of 1468 2040 file.exe WerFault.exe