ee7f4ca49ff6c115698a19da7b1a84e3b660c9d0927b9a3c49e7efa0fd8e6681

Analysis

max time kernel
156s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
04-12-2022 08:16

Target

ee7f4ca49ff6c115698a19da7b1a84e3b660c9d0927b9a3c49e7efa0fd8e6681.exe
Size

42KB
MD5

817b38584b0f1b1b6c06ce841f3eb722
SHA1

3b54b0c7ac711c5ab92552282dd2eeabe6469416
SHA256

ee7f4ca49ff6c115698a19da7b1a84e3b660c9d0927b9a3c49e7efa0fd8e6681
SHA512

0787c400baa3a0d849a53f7135ccaab03bcf3d3eb942394830f10fd888436fcf7dde05dc5fff0001260b65d846115db918638f72a3fc6f5b5b91378e5878dd89
SSDEEP

768:P/Svb+DO02XoHcD0N2TouXz+aP5DvMxZC0z013ZD7aUw7:PA+D2eN2TogCaP5oxZd4T

Score

5^/10

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\msvcr71.dll	ee7f4ca49ff6c115698a19da7b1a84e3b660c9d0927b9a3c49e7efa0fd8e6681.exe
File created	C:\Windows\SysWOW64\ok3.ico	ee7f4ca49ff6c115698a19da7b1a84e3b660c9d0927b9a3c49e7efa0fd8e6681.exe

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2276	4928	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\ee7f4ca49ff6c115698a19da7b1a84e3b660c9d0927b9a3c49e7efa0fd8e6681.exe
"C:\Users\Admin\AppData\Local\Temp\ee7f4ca49ff6c115698a19da7b1a84e3b660c9d0927b9a3c49e7efa0fd8e6681.exe"
1⤵
- Drops file in System32 directory
PID:4928
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4928 -s 236
  2⤵
  - Program crash
  PID:2276

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4928 -ip 4928
1⤵
PID:860

memory/4928-132-0x0000000000400000-0x0000000000444000-memory.dmp

Filesize
272KB

Download
memory/4928-133-0x0000000000400000-0x0000000000444000-memory.dmp

Filesize
272KB

Download