Analysis
-
max time kernel
2s -
max time network
8s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
11/07/2024, 17:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RC2.exe
Resource
win10v2004-20240709-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
RC2API.dll
Resource
win10v2004-20240709-en
0 signatures
150 seconds
General
-
Target
RC2.exe
-
Size
11KB
-
MD5
c63d4d9c2cab728a88f9c675ad7ac879
-
SHA1
42c84de57a3e9fc1ab41f02953b8c81f3a7a3333
-
SHA256
b2668c676ecd2acf39d68486ec9d3c44955a388823b6d7e8f052066945078e7f
-
SHA512
d40552e2e4ec9b0fe92c9e3f643430e473b00a38acb115c7dc7b4deb0d91016a0002d2676c7a0a9722cc3645ec97ed5f782bfe4d36f74b31a06508047d25c196
-
SSDEEP
192:8HG9gUKtGd+7xyIq2l7UVL85lg7oeGwCWEVaDGfGA:4G9gUKtnq2l7U6lg7oeGwCWEVa6fG
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4328 3312 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\RC2.exe"C:\Users\Admin\AppData\Local\Temp\RC2.exe"1⤵PID:3312
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3312 -s 10482⤵
- Program crash
PID:4328
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3312 -ip 33121⤵PID:1376