Analysis
-
max time kernel
41s -
max time network
50s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
07-07-2024 16:55
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Users/administrator/AppData/Local/Temp/report.exe
Resource
win10v2004-20240704-en
8 signatures
300 seconds
Behavioral task
behavioral2
Sample
Users/chrisr_admin/AppData/Local/Temp/RarSFX0/Package.exe
Resource
win10v2004-20240508-en
1 signatures
300 seconds
General
-
Target
Users/chrisr_admin/AppData/Local/Temp/RarSFX0/Package.exe
-
Size
3.5MB
-
MD5
61e304b10372d4bf5bafaec842465e27
-
SHA1
abb987c90eb5e5da5c4eef3a1a4dbbb9b90993bf
-
SHA256
cb3983d8aa29f32fb49e356ecedf8b5d7a62eca3301b1912bd551e34cece8db2
-
SHA512
ec7d2233711ec0315a9c7302b1c74dbc05901f3fe3ada14392216aea4d7f102894750a5a07d98e2016682b35b79bfd7aa852e581aebc775136c0b2d6cd37b22d
-
SSDEEP
98304:r3868ohNKjSkreLRKTmVXYu530kJ7dtXGIzNLFLOAkGkzdnEVomFHKnPE2:rNU4LRbDdtXGIhFLOyomFHKnPx
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4388 556 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\Users\chrisr_admin\AppData\Local\Temp\RarSFX0\Package.exe"C:\Users\Admin\AppData\Local\Temp\Users\chrisr_admin\AppData\Local\Temp\RarSFX0\Package.exe"1⤵PID:556
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 556 -s 6202⤵
- Program crash
PID:4388
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 556 -ip 5561⤵PID:4448