b34640e89ca1159935cea4b19849179532d1d08654d782a57e8edc73742228ea

Analysis

max time kernel
94s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
25/02/2024, 15:08

Target

a419332d88c800bda0dcc22463619621.exe
Size

172KB
MD5

a419332d88c800bda0dcc22463619621
SHA1

9eb1c96a9a451f75d06adf51b032b154b4127829
SHA256

b34640e89ca1159935cea4b19849179532d1d08654d782a57e8edc73742228ea
SHA512

a2b1eca03ef5fc73d922781180845593db926f812660ae3121f7698043f5c681ce80c34b845863a0f594c46012b20f3348cd68a4204e3cf7fc072a6f5abd6098
SSDEEP

3072:jjqQiwqY8yV7oFg0sWByl+h4tUzb9hI16MUWlI6WRmOsM8suFZU1YWdd2+QZ1J:/ZiZNyV7oFg0s3+h4tUX9216tKnz9Z+g

Score

8^/10

Drops file in Drivers directory 1 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\drivers\lttltttt.sys	a419332d88c800bda0dcc22463619621.exe

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2104	1556	WerFault.exe	88

C:\Users\Admin\AppData\Local\Temp\a419332d88c800bda0dcc22463619621.exe
"C:\Users\Admin\AppData\Local\Temp\a419332d88c800bda0dcc22463619621.exe"
1⤵
- Drops file in Drivers directory
PID:1556
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1556 -s 312
  2⤵
  - Program crash
  PID:2104

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1556 -ip 1556
1⤵
PID:2152

memory/1556-0-0x0000000000400000-0x0000000000468000-memory.dmp

Filesize
416KB

Download
memory/1556-1-0x0000000000400000-0x0000000000468000-memory.dmp

Filesize
416KB

Download
memory/1556-3-0x0000000000400000-0x0000000000468000-memory.dmp

Filesize
416KB

Download
memory/1556-5-0x0000000000400000-0x0000000000468000-memory.dmp

Filesize
416KB

Download