9f6b96eb7faf0fc7dec84c92761ebbaedd2d463ef040fa712d39303dc1150c32

Analysis

max time kernel
35s
max time network
42s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
24/02/2024, 10:37

Target

Loader.exe
Size

526KB
MD5

09ce8715e5d5e32d46f1bfce48eb6fd5
SHA1

d8e16d82c7d2c8123f46892986161a967ca27be2
SHA256

9f6b96eb7faf0fc7dec84c92761ebbaedd2d463ef040fa712d39303dc1150c32
SHA512

c4d3c8c99187c36a2cbc3d8c20b39da4db5a1cc6f798a06b5f1c695576da45dec96ef929479f585c38f5e9f312f6fcd583937a54f91ad03c4d8932b7e159288c
SSDEEP

12288:4R/fIPmOKwrKxj9+OKwrKxj9uOKwrKxjaN:4RIswrqj9Ewrqj9UwrqjaN

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2200	4972	WerFault.exe	86

C:\Users\Admin\AppData\Local\Temp\Loader.exe
"C:\Users\Admin\AppData\Local\Temp\Loader.exe"
1⤵
PID:4972
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4972 -s 1056
  2⤵
  - Program crash
  PID:2200

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 180 -p 4972 -ip 4972
1⤵
PID:2508

memory/4972-0-0x00000000750B0000-0x0000000075860000-memory.dmp

Filesize
7.7MB

Download
memory/4972-1-0x0000000000090000-0x000000000011A000-memory.dmp

Filesize
552KB

Download
memory/4972-2-0x0000000004FE0000-0x0000000005584000-memory.dmp

Filesize
5.6MB

Download
memory/4972-3-0x0000000004B10000-0x0000000004BA2000-memory.dmp

Filesize
584KB

Download
memory/4972-4-0x0000000004AB0000-0x0000000004AC2000-memory.dmp

Filesize
72KB

Download
memory/4972-5-0x0000000004D20000-0x0000000004D30000-memory.dmp

Filesize
64KB

Download
memory/4972-6-0x0000000004CE0000-0x0000000004CEA000-memory.dmp

Filesize
40KB

Download
memory/4972-7-0x00000000750B0000-0x0000000075860000-memory.dmp

Filesize
7.7MB

Download