940d0f0e2a1f426b3f53c663cfe50dac8fa2413bc0de8a5ea2e3e23fb3312273

Analysis

max time kernel
175s
max time network
169s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
29/12/2023, 20:16

Target
02ce1999af0794d252edb5b1b168e0ab.exe
Size 260KB
Sample231229-y2f4xaaecm
SHA256 940d0f0e2a1f426b3f53c663cfe50dac8fa2413bc0de8a5ea2e3e23fb3312273
MD5 02ce1999af0794d252edb5b1b168e0ab
SHA1 964f5efeeb696bfd5dd21ac763056d2e5ecbcbcd
SHA512 2e8a4adedb872624cf48f680d47e6a6c2b95e0fce4b0ebedaf698d53c73edd08f029cc0629c65840f9d80f809bb0ebc3dc6d87c004d95d0b5720c55cc83ca1f0
SSDEEP 3072:EyQabYMkTgeLT+w2EC4j0oYb8e+jmbH7EMOjxZG7lb5cug5NNJIaLB7XdfWk3:EyQlTgALXqo1jmUZZG7lb5cug5NNF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2996	2708	WerFault.exe	69

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2708	02ce1999af0794d252edb5b1b168e0ab.exe
2708	02ce1999af0794d252edb5b1b168e0ab.exe

C:\Users\Admin\AppData\Local\Temp\02ce1999af0794d252edb5b1b168e0ab.exe
"C:\Users\Admin\AppData\Local\Temp\02ce1999af0794d252edb5b1b168e0ab.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2708
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2708 -s 476
  2⤵
  - Program crash
  PID:2996

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 2708 -ip 2708
1⤵
PID:564