Analysis
- max time kernel
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
10/09/2026, 16:32
Behavioral task
behavioral1
Sample
Premiere_Set-Up_747p.exe
Resource
win11-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
out.exe
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target out.exe
- Size 10.6MB
- Sample260910-t1yv4svthy
- SHA256 b33a33fd576756a51651ec68e5aaadb967bc87982c03bded59895ef074ed91d7
- MD5 fddc5593e7bd2a8673dfabb843c9e75d
- SHA1 c99d0399412b8741a4ecbf50d00104aad782a8f2
- SHA512 ae6c95fb14c391533c25449022fa3e32facdb9228bb8a604247e95ff159421ab821ce44c8309cdf406cf014df2eb95b9cf78ae57d524373e056a0ce6150867e5
- SSDEEP 196608:1gUpHkwuqM9i6m6SSysDRmCbCHj0UED/3Fdd:jKVqM9i6mtSysDRmCbC/8/rd
- TLSH T1C7B67C22A305C032F55011B3995EE6BA63647D36A76094DBB3E1BE1E21F5AC30B35F1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 1096 2964 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\out.exe"C:\Users\Admin\AppData\Local\Temp\out.exe"1⤵PID:2964
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2964 -s 82⤵
- Program crash
PID:1096
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2964 -ip 29641⤵PID:2768