c7afcd82f36ccadc7dceeaf250ced8ddc900ff52a17805519f0f80286d28bd5b

Analysis

max time kernel
162s
max time network
180s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
05/12/2022, 06:12

Target

c7afcd82f36ccadc7dceeaf250ced8ddc900ff52a17805519f0f80286d28bd5b.exe
Size

393KB
MD5

dd278605b487612f5d5d71d8b7679f0c
SHA1

01084a28c43d294db31109dcf090af12705a0fea
SHA256

c7afcd82f36ccadc7dceeaf250ced8ddc900ff52a17805519f0f80286d28bd5b
SHA512

7fd5c1b15d3012fc8402618e7099a982342ad4976566e7ba2871d9229e1ee7199d8d4715b2e77ef8bfedb6ef5080f6d1274ea4e04cf12b012c22ebc2b285c83c
SSDEEP

3072:F5cqmj89QdEQiynHlgyyzc8B6AeZYnycHve24UaftFVRr92kR/HpXnAnZFmZ/Rnd:Fg89Qgu5dAe23HveGaft+k1HpqFgz

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
4292	c7afcd82f36ccadc7dceeaf250ced8ddc900ff52a17805519f0f80286d28bd5b.exe

Drops file in Windows directory 3 IoCs

description	ioc	Process
File created	C:\Windows\my_sfc_os.dll	c7afcd82f36ccadc7dceeaf250ced8ddc900ff52a17805519f0f80286d28bd5b.exe
File opened for modification	C:\Windows\my_sfc_os.dll	c7afcd82f36ccadc7dceeaf250ced8ddc900ff52a17805519f0f80286d28bd5b.exe
File created	C:\Windows\hpig_WS2.dat	c7afcd82f36ccadc7dceeaf250ced8ddc900ff52a17805519f0f80286d28bd5b.exe

Program crash 1 IoCs

pid	pid_target	Process	procid_target
220	4292	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\c7afcd82f36ccadc7dceeaf250ced8ddc900ff52a17805519f0f80286d28bd5b.exe
"C:\Users\Admin\AppData\Local\Temp\c7afcd82f36ccadc7dceeaf250ced8ddc900ff52a17805519f0f80286d28bd5b.exe"
1⤵
- Loads dropped DLL
- Drops file in Windows directory
PID:4292
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4292 -s 388
  2⤵
  - Program crash
  PID:220

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 4292 -ip 4292
1⤵
PID:4820

C:\Windows\my_sfc_os.dll

Filesize
48KB

MD5
98c499fccb739ab23b75c0d8b98e0481

SHA1
0ef5c464823550d5f53dd485e91dabc5d5a1ba0a

SHA256
d9d8ce1b86b3978889466ab1b9f46778942d276922bf7533327a493083913087

SHA512
9e64ac13e18ab0a518bb85b6612520645b5ab2c9a5359ced943813ba7344714999f25ba0e52240ad2d0c2fefc76552ff43173adc46334ff0b5dba171fb58e4e6

Download Submit
memory/4292-132-0x0000000000400000-0x0000000000460000-memory.dmp

Filesize
384KB

Download
memory/4292-133-0x0000000000400000-0x0000000000460000-memory.dmp

Filesize
384KB

Download
memory/4292-135-0x0000000000400000-0x0000000000460000-memory.dmp

Filesize
384KB

Download