14460f49ce47c51935a5b966ac458fb42558caa9e406dec6fd5120b6cdcfb54d

Resubmissions

01-09-2022 17:21

01-09-2022 17:15

max time kernel
27s
max time network
30s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
01-09-2022 17:21

Target

main.exe
Size

2.2MB
MD5

01f0b10802d9b22b92040c092d57f5c1
SHA1

ca86a8ca2b5b8bf6053d444db0298bb0f78d2ac6
SHA256

14460f49ce47c51935a5b966ac458fb42558caa9e406dec6fd5120b6cdcfb54d
SHA512

2a830dede51eb2c2218d2c0084403010e7ebe0c9eb4f2aadffffa46bccee621c1162194cccec10681cebc8f0284787382624d1df8994f7620ecca09065332e6d
SSDEEP

24576:/Si32qwXmq1y2gk27/ocpnRPuEU1zL3UYPM4aCMtVwS+TA:/5wXG2gDfbmEU1zq4aCiMTA

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4432 3424 WerFault.exe notepad.exe
Suspicious behavior: EnumeratesProcesses 8 IoCs

Processes:

main.exe

pid process

2276 main.exe
2276 main.exe
2276 main.exe
2276 main.exe
2276 main.exe
2276 main.exe
2276 main.exe
2276 main.exe
Suspicious use of WriteProcessMemory 1 IoCs

Processes:

main.exe

description pid process target process

PID 2276 wrote to memory of 3424 2276 main.exe notepad.exe

pid	pid_target	process	target process
4432	3424	WerFault.exe	notepad.exe

description	pid	process	target process
PID 2276 wrote to memory of 3424	2276	main.exe	notepad.exe

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 3424 -s 984
2⤵
- Program crash
PID:4432

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 448 -p 3424 -ip 3424
1⤵
PID:2876