Analysis
-
max time kernel
14s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
13-07-2024 23:05
Behavioral task
behavioral1
Sample
ups.exe
Resource
win7-20240705-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
ups.exe
Resource
win10v2004-20240709-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
out.exe
Resource
win7-20240704-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
out.exe
Resource
win10v2004-20240709-en
1 signatures
150 seconds
General
-
Target
out.exe
-
Size
430KB
-
MD5
7d993afded5cf356d146c89116853604
-
SHA1
ffd0fd025b9fe9bdd1105e62b1b78948bf55bbb2
-
SHA256
577ff7414a9ea28db137d460a0c602b612afbbd3f1691e58756542ab8b4044ea
-
SHA512
4a451f4cb65fcd59fa4ec60b397d3e1871198169f88d124cbc249d74dfea4031f42996e5f870ecc4b82ca5e368c8922b9488a34c481c1aa8b2c798d4f09b9c7b
-
SSDEEP
6144:ZCJBSkHyP4DivRrO+d3cyU6320ho4nbJAj0N91EU7ZUFbz68AO2wjXH7X:ZCJB/RuFhU6ho0ej0N91HFAAw77
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2416 2452 WerFault.exe out.exe -
Suspicious use of WriteProcessMemory 4 IoCs
Processes:
out.exedescription pid process target process PID 2452 wrote to memory of 2416 2452 out.exe WerFault.exe PID 2452 wrote to memory of 2416 2452 out.exe WerFault.exe PID 2452 wrote to memory of 2416 2452 out.exe WerFault.exe PID 2452 wrote to memory of 2416 2452 out.exe WerFault.exe