Analysis
-
max time kernel
366s -
max time network
369s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system -
submitted
25-09-2024 16:27
Behavioral task
behavioral1
Sample
tmpf8bnm6k8.exe
Resource
win11-20240802-en
windows11-21h2-x64
13 signatures
1200 seconds
Behavioral task
behavioral2
Sample
out.exe
Resource
win11-20240802-en
windows11-21h2-x64
1 signatures
1200 seconds
General
-
Target
out.exe
-
Size
634KB
-
MD5
d67ea5285c3c56c6fdc8f2a28354bd44
-
SHA1
53350bfe1a1c7b668cd42bc7c1eddc4383875b85
-
SHA256
fcdf46fc4db849adf0b4127317d2bbc86ab9d00d1756095f7d0f98f835276c2a
-
SHA512
6e2c876f5102336c6ff825ecd4319bc1fb2a2343b04606d60d9640fc0c1baf3f2be1d0b3f37dd5d40d9e4df49c8299322fbc97e9b4f9f50dbcbd71f700ce16d1
-
SSDEEP
12288:WhkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJc:GRmJkcoQricOIQxiZY1
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 464 1956 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\out.exe"C:\Users\Admin\AppData\Local\Temp\out.exe"1⤵PID:1956
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1956 -s 82⤵
- Program crash
PID:464
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 1956 -ip 19561⤵PID:4452