727999826f3ab04339e2b3813d0e53595076ce24cef6dccf4c4a7045483b2ff1

Analysis

max time kernel
141s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 08:43

Target

727999826f3ab04339e2b3813d0e53595076ce24cef6dccf4c4a7045483b2ff1.exe
Size

384KB
MD5

d8d474d19f09c7bc64918f21d95fc4ea
SHA1

13afbdc82d9a1dd340ce3ce0e93b4edacb55c3ba
SHA256

727999826f3ab04339e2b3813d0e53595076ce24cef6dccf4c4a7045483b2ff1
SHA512

4b6807cda51c1e6de6e463962351727987533827a19c69398d74648598c1355109dc4767aeef8e7c5c2846cf761870341b9f7985c31b058cef7835bf52a0a31f
SSDEEP

6144:wgOplVp3vSO4XxPr/jsh/gPNz+ohfavc6I54IZCGrZ:wBptfSXPsh/Do16ccGrZ

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4880 1376 WerFault.exe 727999826f3ab04339e2b3813d0e53595076ce24cef6dccf4c4a7045483b2ff1.exe

pid	pid_target	process	target process
4880	1376	WerFault.exe	727999826f3ab04339e2b3813d0e53595076ce24cef6dccf4c4a7045483b2ff1.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

727999826f3ab04339e2b3813d0e53595076ce24cef6dccf4c4a7045483b2ff1.exe

pid	process
1376	727999826f3ab04339e2b3813d0e53595076ce24cef6dccf4c4a7045483b2ff1.exe
1376	727999826f3ab04339e2b3813d0e53595076ce24cef6dccf4c4a7045483b2ff1.exe

C:\Users\Admin\AppData\Local\Temp\727999826f3ab04339e2b3813d0e53595076ce24cef6dccf4c4a7045483b2ff1.exe
"C:\Users\Admin\AppData\Local\Temp\727999826f3ab04339e2b3813d0e53595076ce24cef6dccf4c4a7045483b2ff1.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1376

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 1376 -s 160
2⤵
- Program crash
PID:4880

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 432 -p 1376 -ip 1376
1⤵
PID:4180