60bc9e0175deba97268ad10e784da56d327398273789cf242303563f500ab22a

Analysis

max time kernel
90s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
29/10/2022, 18:19

Target

60bc9e0175deba97268ad10e784da56d327398273789cf242303563f500ab22a.exe
Size

47KB
MD5

a379ddca734afb962747dc67913c6a40
SHA1

48e0d2fe3a71b623f8c799ea4f3299f3483a0c61
SHA256

60bc9e0175deba97268ad10e784da56d327398273789cf242303563f500ab22a
SHA512

c1c5ec0c07d34d13c5116e58a2058f2e40ee9ae95c28198bf8af958a0f5fb6b53e520dd4339b286454cf76917caa5f68d03aa7385a72a72d04e3311e31eb17fb
SSDEEP

768:0ORCDtany7m6jABX3ZW7MYNxEL4f68YcpEYZnzxVag6zBA0UAEEtNBeQxcsO:TCanGljABn1a045ZnzxUgkBX/BeU

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5072	2616	WerFault.exe	82

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2616	60bc9e0175deba97268ad10e784da56d327398273789cf242303563f500ab22a.exe
2616	60bc9e0175deba97268ad10e784da56d327398273789cf242303563f500ab22a.exe

C:\Users\Admin\AppData\Local\Temp\60bc9e0175deba97268ad10e784da56d327398273789cf242303563f500ab22a.exe
"C:\Users\Admin\AppData\Local\Temp\60bc9e0175deba97268ad10e784da56d327398273789cf242303563f500ab22a.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2616
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2616 -s 324
  2⤵
  - Program crash
  PID:5072

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 2616 -ip 2616
1⤵
PID:2444

memory/2616-132-0x0000000000030000-0x0000000000036000-memory.dmp

Filesize
24KB

Download
memory/2616-133-0x0000000000030000-0x0000000000036000-memory.dmp

Filesize
24KB

Download