Analysis
- max time kernel
140s - max time network
124s - platform
windows10-2004_x64 - resource
win10v2004-20240611-en - resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system - submitted
19/06/2024, 20:10
Behavioral task
behavioral1
Sample
2a00000.exe
Resource
win7-20240508-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2a00000.exe
Resource
win10v2004-20240611-en
1 signatures
150 seconds
General
- Target 2a00000.exe
- Size 452KB
- Sample240619-yxpkgszbla
- SHA256 8b6f6791b4607f7ace3456828c44e96687e95fbdbd6b827124a26c9f5c8a3d6d
- MD5 f1b37366c145972849d8a19f96d6eb37
- SHA1 6f1796ae181e8fc49d891b821a8eb77ceb660a26
- SHA512 d6a4affe01338d56b2e6f24998a079b22ad5fef29b150bad0ac5a348baf74a305b8edd65a33b151828b837775da159a837d654bb4cd11caeedf79118a3a82ae6
- SSDEEP 12288:BPQxQCYTZn6Lh6U9Rge4yr/o/Brwu7g1Fkp7tnUv:BPoQJh6Lh66RNbot6yp5Uv
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 3372 2916 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\2a00000.exe"C:\Users\Admin\AppData\Local\Temp\2a00000.exe"1⤵PID:2916
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2916 -s 4602⤵
- Program crash
PID:3372
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 2916 -ip 29161⤵PID:1960