Analysis
- max time kernel
51s - max time network
51s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
13/06/2024, 00:57
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2024-06-13_e63a555cf99b84f1bf9f1674f04bb05c_babuk_destroyer.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-13_e63a555cf99b84f1bf9f1674f04bb05c_babuk_destroyer.exe
Resource
win10v2004-20240508-en
1 signatures
150 seconds
General
- Target 2024-06-13_e63a555cf99b84f1bf9f1674f04bb05c_babuk_destroyer.exe
- Size 79KB
- Sample240613-ba4dss1hrm
- SHA256 34cdaa238a5a481a44d80fe90521bc682fb8ca13314f9138d576776181e28abc
- MD5 e63a555cf99b84f1bf9f1674f04bb05c
- SHA1 a4fbd21263ca047ebace0beb0cf025ae93243ba5
- SHA512 1fe3f80d5813524f962a9875deae10045ea0da6471f8ba05bf4ad21dc08267f531edb1c72286659ea0a288ce0f07bc8e7495ddfa881786aa52dc886c7ad83d97
- SSDEEP 1536:dO4dRO83UZgjsrQLOJgY8ZZP8LHD4XWaNH71dLdG1iiFM2iG2qcf:NdROxejsrQLOJgY8Zp8LHD4XWaNH71dz
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 2996 4536 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-13_e63a555cf99b84f1bf9f1674f04bb05c_babuk_destroyer.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-13_e63a555cf99b84f1bf9f1674f04bb05c_babuk_destroyer.exe"1⤵PID:4536
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4536 -s 5642⤵
- Program crash
PID:2996
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4536 -ip 45361⤵PID:3244