Analysis
-
max time kernel
93s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
10/07/2024, 08:23
Behavioral task
behavioral1
Sample
62e8d9aa8c44dbbc14b15e4a1d2c652d2d2f65f00bae6c77221ae6a4a686ee41.exe.zip
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
62e8d9aa8c44dbbc14b15e4a1d2c652d2d2f65f00bae6c77221ae6a4a686ee41.exe.zip
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
62e8d9aa8c44dbbc14b15e4a1d2c652d2d2f65f00bae6c77221ae6a4a686ee41.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
62e8d9aa8c44dbbc14b15e4a1d2c652d2d2f65f00bae6c77221ae6a4a686ee41.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
out.exe
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
out.exe
Resource
win10v2004-20240709-en
General
-
Target
out.exe
-
Size
84KB
-
MD5
6b9b4ccf405257ab07822cd355024ef9
-
SHA1
a302be4fa9aa055015eb1e0db85af50efa040a85
-
SHA256
e91a87b701d08d5ef2113094caf00143de911ee6d79d2d544ac309353542f040
-
SHA512
7769a96ce282f6133a1eb68282eebb31db912c7bfc46baa727adf9ab26ca19a79bef0f6b9ebba93d508a980e964599bf7eb908c6552dd0aa931320e1211ce7fd
-
SSDEEP
768:nOPXIRHHC1KGP0cbWDA753381H6zrichXHYojfB13uxP8/SQ49hTMbsJK:nOPaHH+KGP0cbh3I8hooDj3uxP8Vx
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5100 1180 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\out.exe"C:\Users\Admin\AppData\Local\Temp\out.exe"1⤵PID:1180
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1180 -s 2242⤵
- Program crash
PID:5100
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 1180 -ip 11801⤵PID:2312