724fa4d8c8923cfb6257c0e0ce3f86bd1802d69f739e7e82c1ad8ad7540ae299

Analysis

max time kernel
154s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 09:53

Target

724fa4d8c8923cfb6257c0e0ce3f86bd1802d69f739e7e82c1ad8ad7540ae299.exe
Size

264KB
MD5

c594563362c9a6fb90646557a27779fd
SHA1

41d198d52183a9aead0d48a80c0b93dbb4c20673
SHA256

724fa4d8c8923cfb6257c0e0ce3f86bd1802d69f739e7e82c1ad8ad7540ae299
SHA512

255248f77ee62ef0e5fe821e1b42272cee93cde981105d39c411efad42e50a8f4c828b363ec0af1b85b185f06951956da28ac10ee28b91482cf0166013d164d3
SSDEEP

3072:H37rkk0Q2hND+P84uSPsXw4i/tHQYUHXAnGHvvS0kYNx1fNy:HrAQ2heASPsy/4AnGHCjY39Ny

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

724fa4d8c8923cfb6257c0e0ce3f86bd1802d69f739e7e82c1ad8ad7540ae299.exe

pid process

3884 724fa4d8c8923cfb6257c0e0ce3f86bd1802d69f739e7e82c1ad8ad7540ae299.exe

pid	process
3884	724fa4d8c8923cfb6257c0e0ce3f86bd1802d69f739e7e82c1ad8ad7540ae299.exe

C:\Users\Admin\AppData\Local\Temp\724fa4d8c8923cfb6257c0e0ce3f86bd1802d69f739e7e82c1ad8ad7540ae299.exe
"C:\Users\Admin\AppData\Local\Temp\724fa4d8c8923cfb6257c0e0ce3f86bd1802d69f739e7e82c1ad8ad7540ae299.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:3884

C:\Windows\system32\WerFault.exe
"C:\Windows\system32\WerFault.exe" -k -lc NDIS NDIS-20221123-1111.dmp
1⤵
PID:4188

memory/3884-132-0x0000000000400000-0x0000000000444000-memory.dmp

Filesize
272KB

Download
memory/3884-133-0x0000000002B80000-0x0000000002BC4000-memory.dmp

Filesize
272KB

Download
memory/3884-134-0x0000000000400000-0x0000000000444000-memory.dmp

Filesize
272KB

Download
memory/3884-135-0x0000000000400000-0x0000000000444000-memory.dmp

Filesize
272KB

Download