70b278b5e01f7cc409a112892e8f2ff243afa0d0815d060e31a813ba24316d37

Resubmissions

08-06-2022 08:46

01-06-2022 16:57

Target

70b278b5e01f7cc409a112892e8f2ff243afa0d0815d060e31a813ba24316d37.bin.exe
Size

413KB
MD5

7540c893f18b33b0e4d6a1fba417ab0e
SHA1

5c7746c6f8f13eb18ecd41ea3ecd4b5de51e3519
SHA256

70b278b5e01f7cc409a112892e8f2ff243afa0d0815d060e31a813ba24316d37
SHA512

e9d8b20516b8083df1e35ac0be4fd5491a0cf450bf152f8c8d0b9776d3536c1f0249b3d8af09ca575a734d0552ea90e62410b1cb24a1f423cc72b72f9878e473

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
4092	4876	WerFault.exe	79
4500	4876	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\70b278b5e01f7cc409a112892e8f2ff243afa0d0815d060e31a813ba24316d37.bin.exe
"C:\Users\Admin\AppData\Local\Temp\70b278b5e01f7cc409a112892e8f2ff243afa0d0815d060e31a813ba24316d37.bin.exe"
1⤵
PID:4876
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4876 -s 328
  2⤵
  - Program crash
  PID:4092
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4876 -s 164
  2⤵
  - Program crash
  PID:4500

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 4876 -ip 4876
1⤵
PID:2160

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4876 -ip 4876
1⤵
PID:4844

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2064