Analysis
-
max time kernel
93s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
19/07/2024, 22:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1475b319eaa10ae13acaab2d6530d000N.exe
Resource
win7-20240708-en
2 signatures
120 seconds
Behavioral task
behavioral2
Sample
1475b319eaa10ae13acaab2d6530d000N.exe
Resource
win10v2004-20240709-en
1 signatures
120 seconds
General
-
Target
1475b319eaa10ae13acaab2d6530d000N.exe
-
Size
472KB
-
MD5
1475b319eaa10ae13acaab2d6530d000
-
SHA1
1911af5955caa54e921c00506d7bf0431aea6bd1
-
SHA256
3e432fb0165377d4faed9fb0bdddbac452b8f0ddae73f27c91b003d1b4b42109
-
SHA512
bc765d53c55ac834256f7390d3d28dc230d1fb35ee65f4475553e2ef5ebce1fad5c40eaa599c1538173ff4cfe83674dd4e9e45daef1ef67242f7d032af62ccce
-
SSDEEP
3072:+E18RinudiP52xx67lLdJiHDosEyEWB0BVY5DsZeBHmRQ8:skgiPA6R7PgmBigR
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4472 3664 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\1475b319eaa10ae13acaab2d6530d000N.exe"C:\Users\Admin\AppData\Local\Temp\1475b319eaa10ae13acaab2d6530d000N.exe"1⤵PID:3664
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3664 -s 2242⤵
- Program crash
PID:4472
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3664 -ip 36641⤵PID:5076