8cfc5ef488f2da5bab2e22d339f8a1d72c0fc642513365f25202befd145f543b

Analysis

max time kernel
150s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
29/11/2022, 05:42

Target

8cfc5ef488f2da5bab2e22d339f8a1d72c0fc642513365f25202befd145f543b.exe
Size

484KB
MD5

38ac7a9176ca57a133cf07618ca651b0
SHA1

47c2b148d2fb7784e8ea529cbbab811143cd3a6f
SHA256

8cfc5ef488f2da5bab2e22d339f8a1d72c0fc642513365f25202befd145f543b
SHA512

89889453b9516124488f71f2123b999d255ae0195838cc7f7a3f1f9cd2c8818edce43eb2ca7f968916d8aff973b3b906dc739663f944a8d2b4a502549262b323
SSDEEP

12288:Iu3URWtsYf8PemjE8h0UxH9ND6fvhMrf1seW2/q:IkQe8PemjTh0Ul/8vh+qj

Score

8^/10

Executes dropped EXE 1 IoCs

pid	Process
4532	lrguirl.exe

Drops file in Program Files directory 1 IoCs

description	ioc	Process
File created	C:\PROGRA~3\Mozilla\lrguirl.exe	8cfc5ef488f2da5bab2e22d339f8a1d72c0fc642513365f25202befd145f543b.exe

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3788	4532	WerFault.exe	86

C:\Users\Admin\AppData\Local\Temp\8cfc5ef488f2da5bab2e22d339f8a1d72c0fc642513365f25202befd145f543b.exe
"C:\Users\Admin\AppData\Local\Temp\8cfc5ef488f2da5bab2e22d339f8a1d72c0fc642513365f25202befd145f543b.exe"
1⤵
- Drops file in Program Files directory
PID:368

C:\PROGRA~3\Mozilla\lrguirl.exe
C:\PROGRA~3\Mozilla\lrguirl.exe -ixegbjc
1⤵
- Executes dropped EXE
PID:4532
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4532 -s 440
  2⤵
  - Program crash
  PID:3788

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4532 -ip 4532
1⤵
PID:2212

C:\PROGRA~3\Mozilla\lrguirl.exe

Filesize
484KB

MD5
7a31886f7296ac1ee51bc2e37cf49d89

SHA1
dc5ef7527845e0753d0cafbb2f252d9cb3dd2f6c

SHA256
4866c592c84cc0dfa8381c8ff1bee1f49e75f8b349bd0cc53162d9281e2a80cf

SHA512
b88c3dbc31fecccbeca17195b044b5140ac7790366a36be0f4df5eb26e86305d67aba6e27c677ccf1eb91ce10f2c3e1b80f5c6cd9d094104b3fdfb2fcc732b83

Download Submit
C:\ProgramData\Mozilla\lrguirl.exe

Filesize
484KB

MD5
7a31886f7296ac1ee51bc2e37cf49d89

SHA1
dc5ef7527845e0753d0cafbb2f252d9cb3dd2f6c

SHA256
4866c592c84cc0dfa8381c8ff1bee1f49e75f8b349bd0cc53162d9281e2a80cf

SHA512
b88c3dbc31fecccbeca17195b044b5140ac7790366a36be0f4df5eb26e86305d67aba6e27c677ccf1eb91ce10f2c3e1b80f5c6cd9d094104b3fdfb2fcc732b83

Download Submit
memory/368-132-0x00000000020B0000-0x000000000210B000-memory.dmp

Filesize
364KB

Download
memory/368-133-0x0000000000400000-0x000000000045B000-memory.dmp

Filesize
364KB

Download
memory/368-134-0x0000000000400000-0x000000000045B000-memory.dmp

Filesize
364KB

Download
memory/368-137-0x0000000000400000-0x000000000045B000-memory.dmp

Filesize
364KB

Download
memory/4532-138-0x0000000000DB0000-0x0000000000E0B000-memory.dmp

Filesize
364KB

Download