7ddc5a9948db0509f477344cdaa88a467c4e58a92c537b11c212c5a2f5377cde

Analysis

max time kernel
150s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
31/12/2023, 02:54

Target

25521d95b03a45e9acd980f79803fd7d.exe
Size

113KB
MD5

25521d95b03a45e9acd980f79803fd7d
SHA1

debe19fcbbecc18761e83ce9e7910bfbc125ee53
SHA256

7ddc5a9948db0509f477344cdaa88a467c4e58a92c537b11c212c5a2f5377cde
SHA512

4fff43c4cf2204d71052d0c17df8782a082e7f4770c1716472edd02f96482dabc5244fa2d5062342868cf6de02490a698477be9302df08b26871d10515e52250
SSDEEP

3072:SvL+ieJckOoB+jroQ1+vGVQrsjgstG8PZk:SvL+iByBzQ1+0QrsjHjPZ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3984	2180	WerFault.exe	20

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2180	25521d95b03a45e9acd980f79803fd7d.exe
2180	25521d95b03a45e9acd980f79803fd7d.exe

C:\Users\Admin\AppData\Local\Temp\25521d95b03a45e9acd980f79803fd7d.exe
"C:\Users\Admin\AppData\Local\Temp\25521d95b03a45e9acd980f79803fd7d.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2180
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2180 -s 548
  2⤵
  - Program crash
  PID:3984

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2180 -ip 2180
1⤵
PID:1616

memory/2180-0-0x0000000000400000-0x0000000000411000-memory.dmp

Filesize
68KB

Download
memory/2180-1-0x0000000002180000-0x00000000021D5000-memory.dmp

Filesize
340KB

Download
memory/2180-3-0x0000000002180000-0x00000000021D5000-memory.dmp

Filesize
340KB

Download
memory/2180-2-0x0000000002180000-0x00000000021D5000-memory.dmp

Filesize
340KB

Download
memory/2180-4-0x0000000002180000-0x00000000021D5000-memory.dmp

Filesize
340KB

Download
memory/2180-7-0x0000000000400000-0x0000000000411000-memory.dmp

Filesize
68KB

Download