Overview

overview

3

Static

static

3

virussign....d0.exe

windows7-x64

1

virussign....d0.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-05-2024 19:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    virussign.com_9ba6fe59a44da72033dda68a9b7333d0.exe

  • Size

    14KB

  • MD5

    9ba6fe59a44da72033dda68a9b7333d0

  • SHA1

    94f294605d2a3eab8dd696513ee938c6423ada48

  • SHA256

    10a176fa3b7e8d35bffa68ddeb751210b0a5f91b37539f549de9084e666b737a

  • SHA512

    dc192ceb5a21c909f4968695a5b34bd077244b5e319d3f8b1809480c2d3275e0abc589814e2fbc4f6033a9d4be8581d1a63fd27c9f5e970934d31625455b3278

  • SSDEEP

    384:UbvyHKIGlMLWWWWWWWWWWWWWWWye3Lqc3eDE045HRrZrZre:UbvyHKIAMLWWWWWWWWWWWWWWWzLq80A7

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\virussign.com_9ba6fe59a44da72033dda68a9b7333d0.exe
    "C:\Users\Admin\AppData\Local\Temp\virussign.com_9ba6fe59a44da72033dda68a9b7333d0.exe"
    1⤵
      PID:4464
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4464 -s 212
        2⤵
        • Program crash
        PID:3040
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4464 -ip 4464
      1⤵
        PID:212

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4464-0-0x0000000000400000-0x000000000040A000-memory.dmp

        Filesize

        40KB

        Download