Analysis
-
max time kernel
51s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
10/06/2024, 21:54
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
VirusShare_b790d39303d6dd72888356ccf29496d3.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
VirusShare_b790d39303d6dd72888356ccf29496d3.exe
Resource
win10v2004-20240508-en
1 signatures
150 seconds
General
-
Target
VirusShare_b790d39303d6dd72888356ccf29496d3.exe
-
Size
544KB
-
MD5
b790d39303d6dd72888356ccf29496d3
-
SHA1
ef18b90de15ba8b74be13394bb430e8b14930223
-
SHA256
b1110ac4176c82134ae226c742d7ab5b0649d9ad4e35464342abcc33d4cf0215
-
SHA512
1cf0a2b73312d5a10245fd797b8ee381b68932cf912ac3219f642fdc124873e7a535cc190c0a526bdddf641cadbb3e7f4d19c81b45a4a7ab23a0e049a26fbeea
-
SSDEEP
12288:BR4v+jMkvf42wrCPIOHoHKtXs4oDfN/yqQtwcpUre/vvdr:B++wk34LOHo5DfN/yqQie
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 888 1636 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\VirusShare_b790d39303d6dd72888356ccf29496d3.exe"C:\Users\Admin\AppData\Local\Temp\VirusShare_b790d39303d6dd72888356ccf29496d3.exe"1⤵PID:1636
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1636 -s 4282⤵
- Program crash
PID:888
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1636 -ip 16361⤵PID:1648