be808410e58f89bd106c9c79abb9062e68917f6f3b47af49d059bd25b0ce0ccb

Analysis

max time kernel
185s
max time network
191s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
05/12/2022, 07:14

Target

be808410e58f89bd106c9c79abb9062e68917f6f3b47af49d059bd25b0ce0ccb.exe
Size

156KB
MD5

e40c9234b6a22048e69e246dd9108fe3
SHA1

5e9bd8b935bf160ff0601b41163ce0746fc70b03
SHA256

be808410e58f89bd106c9c79abb9062e68917f6f3b47af49d059bd25b0ce0ccb
SHA512

3aee6b7128846e0ba8683e23e87fe4d3e7871f658f88538869cbd70cf3c783d67856a9a839a0a48f0c28b7ad68559158add7b1eb44b57e9225ca8b8a0d605a6e
SSDEEP

3072:aQSgtawlUuMlxNsOb4g65YUnSusiXseUmBzGCdG8pxFjoqis4:aQ1taw4xNsNtYUSzDeUmByq3x

Score

8^/10

Drops file in Drivers directory 1 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\drivers\grande48.sys	be808410e58f89bd106c9c79abb9062e68917f6f3b47af49d059bd25b0ce0ccb.exe

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4708	4532	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\be808410e58f89bd106c9c79abb9062e68917f6f3b47af49d059bd25b0ce0ccb.exe
"C:\Users\Admin\AppData\Local\Temp\be808410e58f89bd106c9c79abb9062e68917f6f3b47af49d059bd25b0ce0ccb.exe"
1⤵
- Drops file in Drivers directory
PID:4532
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4532 -s 312
  2⤵
  - Program crash
  PID:4708

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 4532 -ip 4532
1⤵
PID:808

memory/4532-132-0x0000000000400000-0x000000000045C000-memory.dmp

Filesize
368KB

Download
memory/4532-133-0x0000000000400000-0x000000000045C000-memory.dmp

Filesize
368KB

Download
memory/4532-134-0x0000000000400000-0x000000000045C000-memory.dmp

Filesize
368KB

Download