Analysis
-
max time kernel
93s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
10-06-2024 11:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
VirusShare_5d81e04abea581cd314aceabafaaff18.exe
Resource
win7-20240508-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
VirusShare_5d81e04abea581cd314aceabafaaff18.exe
Resource
win10v2004-20240426-en
1 signatures
150 seconds
General
-
Target
VirusShare_5d81e04abea581cd314aceabafaaff18.exe
-
Size
406KB
-
MD5
5d81e04abea581cd314aceabafaaff18
-
SHA1
e71254283e5fe4701eea95c0bab62cc794f38cdc
-
SHA256
d37f1e805b3f9873ce76f18ea930c6fa0a7b8a9d6bc319404471e70e396f791a
-
SHA512
6c50e72f37ccbb5f7ce7130b2607fa668bff238ced5f3d646c4f6c6dfdcd873706e96d5e3bf8a16cc32b52322ec71c06056df44dc65b33ec60602faa048343a0
-
SSDEEP
6144:K9iqsrJ0LOMc6iAOhgrwOaSq1YXyDTQHZgpNMUpmC+OkykD+Wyasv:Kgqslsc5fUcGnHSpN7ICCyi1I
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5096 3496 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\VirusShare_5d81e04abea581cd314aceabafaaff18.exe"C:\Users\Admin\AppData\Local\Temp\VirusShare_5d81e04abea581cd314aceabafaaff18.exe"1⤵PID:3496
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3496 -s 4802⤵
- Program crash
PID:5096
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3496 -ip 34961⤵PID:2020