c1f8c6d326e08c8f0f39709f832ef084539eb845fa099a54c8b8d2399e1d3a05

Analysis

max time kernel
144s
max time network
169s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
04-12-2022 08:19

Target

c1f8c6d326e08c8f0f39709f832ef084539eb845fa099a54c8b8d2399e1d3a05.exe
Size

262KB
MD5

8d7edbe10a6edc45e42e4aacdc6028f7
SHA1

22a31b559885a7879c8271826ccb328428873ebe
SHA256

c1f8c6d326e08c8f0f39709f832ef084539eb845fa099a54c8b8d2399e1d3a05
SHA512

664e8f39219b76ad5fc84c6501ca2085bfb8f49cf5d742f29194b7a62a82ebe3682974d11a3603be87ae65676957c0757b52737ebf62a0dea2b0d9db318bf13e
SSDEEP

6144:rcHuwZpIS2O1zHsQkCvbI+bsCZSc2WIKvKpa2EwTYpLoT:rsZpISBoQ3bXhScRKpa3wEpm

Score

5^/10

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\mqoa.tlb	c1f8c6d326e08c8f0f39709f832ef084539eb845fa099a54c8b8d2399e1d3a05.exe
File created	C:\Windows\SysWOW64\1.ico	c1f8c6d326e08c8f0f39709f832ef084539eb845fa099a54c8b8d2399e1d3a05.exe

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4896	1880	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\c1f8c6d326e08c8f0f39709f832ef084539eb845fa099a54c8b8d2399e1d3a05.exe
"C:\Users\Admin\AppData\Local\Temp\c1f8c6d326e08c8f0f39709f832ef084539eb845fa099a54c8b8d2399e1d3a05.exe"
1⤵
- Drops file in System32 directory
PID:1880
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1880 -s 404
  2⤵
  - Program crash
  PID:4896

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1880 -ip 1880
1⤵
PID:4968

memory/1880-132-0x0000000000400000-0x00000000004D2000-memory.dmp

Filesize
840KB

Download