1c61d25c79154e1c4cefed844d0a851ddf3c4eb8c6d2e5b08bac798240f464bf

Analysis

max time kernel
291s
max time network
294s
platform
windows10-1703_x64
resource
win10-20230703-en
resource tags

arch:x64arch:x86image:win10-20230703-enlocale:en-usos:windows10-1703-x64system
submitted
22/08/2023, 04:04

Target

1c61d25c79154e1c4cefed844d0a851ddf3c4eb8c6d2e5b08bac798240f464bf.exe
Size

3.9MB
MD5

7e775ac8d8eb5769cfa938e0748eb008
SHA1

676af41ac9512954f98f536e21a2afcb296f464f
SHA256

1c61d25c79154e1c4cefed844d0a851ddf3c4eb8c6d2e5b08bac798240f464bf
SHA512

f3fefdfd1f7d9d1e77d246448629351822a529b8e581cb30c3c6c4eb566c956941a7288b2c4e707334caa3fdadf3c720a4df801f176fa0da96afb5d82ca6d635
SSDEEP

49152:Sgh98D4xlsAOPmUIkUI8RUyvhoDCfVC0fLqaNl1XvGTx/S5rcWqjXNO:Ia71f+O

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
920	3752	WerFault.exe	69

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
3752	1c61d25c79154e1c4cefed844d0a851ddf3c4eb8c6d2e5b08bac798240f464bf.exe

C:\Users\Admin\AppData\Local\Temp\1c61d25c79154e1c4cefed844d0a851ddf3c4eb8c6d2e5b08bac798240f464bf.exe
"C:\Users\Admin\AppData\Local\Temp\1c61d25c79154e1c4cefed844d0a851ddf3c4eb8c6d2e5b08bac798240f464bf.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3752
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 3752 -s 1088
  2⤵
  - Program crash
  PID:920

memory/3752-117-0x0000000000400000-0x00000000007F2000-memory.dmp

Filesize
3.9MB

Download
memory/3752-119-0x00007FFEE11A0000-0x00007FFEE1584000-memory.dmp

Filesize
3.9MB

Download