a17027ce5d96b89d231fd8f7460c42f2e9a971fe2202f4e9b0ec23cd27135867

Analysis

max time kernel
156s
max time network
175s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
06-12-2022 12:12

Target

a17027ce5d96b89d231fd8f7460c42f2e9a971fe2202f4e9b0ec23cd27135867.exe
Size

40KB
MD5

cbd6f98f6d9ae0628cf9b58de6247bba
SHA1

9b8c62679816f0146f9b73986401ed858d1df244
SHA256

a17027ce5d96b89d231fd8f7460c42f2e9a971fe2202f4e9b0ec23cd27135867
SHA512

3582f2f2b973283b03734f5c7f1b1eaaee26bd7f7bc6457c2d702d4543175cc1466fbe82a7419034af9d4c1304e67642e4872aec2a1893fcd7b1e12923477a3c
SSDEEP

768:KkoeoKk3tQy7FwpBnUsY4xYgbLrzRioK8lkf:KkoekiGwpJhJr0

Score

5^/10

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\fkre6001.exe	a17027ce5d96b89d231fd8f7460c42f2e9a971fe2202f4e9b0ec23cd27135867.exe
File opened for modification	C:\Windows\SysWOW64\fkre6001.exe	a17027ce5d96b89d231fd8f7460c42f2e9a971fe2202f4e9b0ec23cd27135867.exe

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2032	1324	WerFault.exe	79

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1324	a17027ce5d96b89d231fd8f7460c42f2e9a971fe2202f4e9b0ec23cd27135867.exe
1324	a17027ce5d96b89d231fd8f7460c42f2e9a971fe2202f4e9b0ec23cd27135867.exe

C:\Users\Admin\AppData\Local\Temp\a17027ce5d96b89d231fd8f7460c42f2e9a971fe2202f4e9b0ec23cd27135867.exe
"C:\Users\Admin\AppData\Local\Temp\a17027ce5d96b89d231fd8f7460c42f2e9a971fe2202f4e9b0ec23cd27135867.exe"
1⤵
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
PID:1324
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1324 -s 524
  2⤵
  - Program crash
  PID:2032

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 1324 -ip 1324
1⤵
PID:4528

memory/1324-132-0x0000000000400000-0x0000000000411000-memory.dmp

Filesize
68KB

Download
memory/1324-133-0x0000000000400000-0x0000000000411000-memory.dmp

Filesize
68KB

Download