46906a99e162e25beaa7cbd3e04993676d6dab291777521c9c6549439581528f

Analysis

max time kernel
137s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
04-02-2024 08:15

Target

8ea7a6bca7ea50e67ab14b0ee465d8b7.exe
Size

20KB
MD5

8ea7a6bca7ea50e67ab14b0ee465d8b7
SHA1

bb2a21e75df43c638aff0f1ff333225830024535
SHA256

46906a99e162e25beaa7cbd3e04993676d6dab291777521c9c6549439581528f
SHA512

6e2ecf94e89e1b07a7e775f125595674266d526ead9ad4a11835ce20cbd32c19c6456ba509ff88773c51908824dde0bfebb3cff63f3cde90efeac452b4e9469f
SSDEEP

384:I+vgtSXSsHkTqrK4izb7kFf1Rs5kMcKcJrSe+049cz6Y+WVc1O:dsSCx2r/izvaf1ck9JSx9GSxQ

Score

5^/10

Drops file in System32 directory 1 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\DirectX\DirectX.ini	8ea7a6bca7ea50e67ab14b0ee465d8b7.exe

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1832	2244	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\8ea7a6bca7ea50e67ab14b0ee465d8b7.exe
"C:\Users\Admin\AppData\Local\Temp\8ea7a6bca7ea50e67ab14b0ee465d8b7.exe"
1⤵
- Drops file in System32 directory
PID:2244
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2244 -s 388
  2⤵
  - Program crash
  PID:1832

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 2244 -ip 2244
1⤵
PID:2568

memory/2244-0-0x0000000013140000-0x0000000013165000-memory.dmp

Filesize
148KB

Download
memory/2244-1-0x0000000013140000-0x0000000013165000-memory.dmp

Filesize
148KB

Download