1ecd70cf23219279128c4336ae1fc0c63e443cab94b3809531029027755debc4

Analysis

max time kernel
96s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 08:08

Target

1ecd70cf23219279128c4336ae1fc0c63e443cab94b3809531029027755debc4.exe
Size

389KB
MD5

2e7d4eb3896b6bf76897b77c2674f7d9
SHA1

dd9e2c4da57e4454501c974e3b8518e65761b88b
SHA256

1ecd70cf23219279128c4336ae1fc0c63e443cab94b3809531029027755debc4
SHA512

0a2dd8395aee8ece134938e813ebab7435b5ce6d748ed9ef705a45cdec72e36e850f4b7f60ea13c43ce96576ff65b30cbc9fd8a2c3002dee7e38b33853fa41e3
SSDEEP

6144:1VooG71RRx4xLFQKCK5gzwj4s2ohx/uVg54IZCGrZ:AocbRCF75gW2ovUWcGrZ

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2232 4800 WerFault.exe 1ecd70cf23219279128c4336ae1fc0c63e443cab94b3809531029027755debc4.exe

pid	pid_target	process	target process
2232	4800	WerFault.exe	1ecd70cf23219279128c4336ae1fc0c63e443cab94b3809531029027755debc4.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

1ecd70cf23219279128c4336ae1fc0c63e443cab94b3809531029027755debc4.exe

pid	process
4800	1ecd70cf23219279128c4336ae1fc0c63e443cab94b3809531029027755debc4.exe
4800	1ecd70cf23219279128c4336ae1fc0c63e443cab94b3809531029027755debc4.exe

C:\Users\Admin\AppData\Local\Temp\1ecd70cf23219279128c4336ae1fc0c63e443cab94b3809531029027755debc4.exe
"C:\Users\Admin\AppData\Local\Temp\1ecd70cf23219279128c4336ae1fc0c63e443cab94b3809531029027755debc4.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4800

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4800 -s 160
2⤵
- Program crash
PID:2232

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 460 -p 4800 -ip 4800
1⤵
PID:2028