a5dfc231394804231212ed7aa5116649c66676d5515600b69d3af6874b2746fb

Analysis

max time kernel
139s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20230824-en
resource tags

arch:x64arch:x86image:win10v2004-20230824-enlocale:en-usos:windows10-2004-x64system
submitted
28/08/2023, 12:56

Target

a5dfc231394804231212ed7aa5116649c66676d5515600b69d3af6874b2746fb.exe
Size

1.5MB
MD5

b2cd6b79ca21eb192cd0cd31d61ac57b
SHA1

234224da7fb7c68dcf242623ce28311dff7a3d4a
SHA256

a5dfc231394804231212ed7aa5116649c66676d5515600b69d3af6874b2746fb
SHA512

740664c1bf17dc3d3da1c4ff33d2b2f58d50d41e157c9f6b1983abf16d5e52b1a0237f3bdd961e3b36c6f5c3da9ba6337533b584f8d2576021cdce467ddd35d8
SSDEEP

12288:20e5CGavkgGCc6yrRPpOSqGlsbbbIolRIBAU/xLYaYcMG3zumoSnizR:9Gavkg3NyNIbbbIoIBAUZLY9G31izR

Score

5^/10

Drops file in System32 directory 1 IoCs

description	ioc	Process
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{8B26FB8F-ED9C-4B25-874E-28947DFC170C}.catalogItem	svchost.exe

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2044	2164	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\a5dfc231394804231212ed7aa5116649c66676d5515600b69d3af6874b2746fb.exe
"C:\Users\Admin\AppData\Local\Temp\a5dfc231394804231212ed7aa5116649c66676d5515600b69d3af6874b2746fb.exe"
1⤵
PID:2164
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2164 -s 240
  2⤵
  - Program crash
  PID:2044

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
1⤵
- Drops file in System32 directory
PID:3500

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 2164 -ip 2164
1⤵
PID:4680