Analysis
- max time kernel
92s - max time network
94s - platform
windows10-2004_x64 - resource
win10v2004-20240426-en - resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system - submitted
02/06/2024, 18:47
Behavioral task
behavioral1
Sample
virussign.com_b2144173807feda50a8d2c7e3b224790.exe
Resource
win7-20240508-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
virussign.com_b2144173807feda50a8d2c7e3b224790.exe
Resource
win10v2004-20240426-en
1 signatures
150 seconds
General
- Target virussign.com_b2144173807feda50a8d2c7e3b224790.exe
- Size 71KB
- Sample240602-xe59vabb5y
- SHA256 61adc6d3ea54ec6cb6b2dce58bb892f7aaf2c2b811b6c136ff68ae57f0771858
- MD5 b2144173807feda50a8d2c7e3b224790
- SHA1 eabae32ab9fd739c577cb1f578807431a69abfc3
- SHA512 d536f39c39feac56218fb59bad697ec68922685f2737bc9263310bfe5d15492a7009bb9e8089976d175e9a83375ba70c828242c0c99ec311eacc47731ccc7ad4
- SSDEEP 1536:Xgs2wgCqbfusDBegRmY3xHER7WRWdpI7Uc:VgCqCsDB/Rm8klpI4
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4564 4612 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\virussign.com_b2144173807feda50a8d2c7e3b224790.exe"C:\Users\Admin\AppData\Local\Temp\virussign.com_b2144173807feda50a8d2c7e3b224790.exe"1⤵PID:4612
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4612 -s 4922⤵
- Program crash
PID:4564
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 4612 -ip 46121⤵PID:3672