6ab293eefaf48c60253d31abe654426e019b420093e5ce6cfdd769dece25c51c

Analysis

max time kernel
150s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
14/10/2023, 01:05

Target
1688-10-0x0000000000400000-0x0000000000420000-memory.exe
Size 128KB
Sample231014-bfw7nsag46
SHA256 6ab293eefaf48c60253d31abe654426e019b420093e5ce6cfdd769dece25c51c
MD5 8c4a6f294aa2a946f29d84d7e2cff297
SHA1 06043aeb75a7f5404ce69ad02bbec09a86a5b556
SHA512 9ac1402cfd41896e5ce678e890ef7aa4ce3dcda12def7832298a9f37ab88b1ef66614352aabdc2b5e4efc35a4eda9865564303b6f86c5ace1a10ee0b8bc52592
SSDEEP 3072:tuOSXpMx7ZAlHsbfUkolNGti7lfqeSxM3SpyEY3E/rxg/:Zzx7ZApszolIo7lf/ipT/r
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4604	4840	WerFault.exe	85

C:\Users\Admin\AppData\Local\Temp\1688-10-0x0000000000400000-0x0000000000420000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1688-10-0x0000000000400000-0x0000000000420000-memory.exe"
1⤵
PID:4840
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4840 -s 216
  2⤵
  - Program crash
  PID:4604

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4840 -ip 4840
1⤵
PID:2084