f0badefbea32f589ff694f49be5a4dfc4d84371ec527415b27ba7f4871a21107

Analysis

max time kernel
93s
max time network
167s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
11-10-2022 19:26

Target

f0badefbea32f589ff694f49be5a4dfc4d84371ec527415b27ba7f4871a21107.exe
Size

81KB
MD5

13b5dea7c79e3114d9fb5c139ffe20f9
SHA1

6f0c09116b7511bdd80298e40bf1b0283b8375de
SHA256

f0badefbea32f589ff694f49be5a4dfc4d84371ec527415b27ba7f4871a21107
SHA512

f41c2a977adac90fd1be37f1209752395d697637765cca702997360c8dbef96b1f07e96329d1c4d8c0889605a605c7aa02a2efa1423ffcabb472ad6f1843d636
SSDEEP

1536:j3iL2z3rAhXWyBAWlfjvaBA+eFnToIfiNRpaWSy1fzTHR6DAm:jiL2z3rAhFwBA+etTBfiNRYWnlT0Am

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2240	4176	WerFault.exe	80

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4176	f0badefbea32f589ff694f49be5a4dfc4d84371ec527415b27ba7f4871a21107.exe
4176	f0badefbea32f589ff694f49be5a4dfc4d84371ec527415b27ba7f4871a21107.exe

C:\Users\Admin\AppData\Local\Temp\f0badefbea32f589ff694f49be5a4dfc4d84371ec527415b27ba7f4871a21107.exe
"C:\Users\Admin\AppData\Local\Temp\f0badefbea32f589ff694f49be5a4dfc4d84371ec527415b27ba7f4871a21107.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4176
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4176 -s 324
  2⤵
  - Program crash
  PID:2240

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4176 -ip 4176
1⤵
PID:3048