fc19a61914322610a855d800eef15e010765069c405d4d85cf34e6da933ebb8a

Analysis

max time kernel
147s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
06/03/2024, 10:19

Target
b72da637e27c88203a7e13b155752a69.exe
Size 123KB
Sample240306-mcnlxaaa48
SHA256 fc19a61914322610a855d800eef15e010765069c405d4d85cf34e6da933ebb8a
MD5 b72da637e27c88203a7e13b155752a69
SHA1 881792ec6bc26897087c7676e696ed28bfdc38b3
SHA512 e2e1aa5995069e6c7286a5342447049c2c26bcfb477ccff63fce944a524967536c82542dd5b15195faa729b8ad8d53a539f6845430ec7e314d14b300527aaabc
SSDEEP 3072:pAcPAcm1wMZQcXFp7foLtNWpfPjP4PoCmuJk3cPwLn:pAKAJCgp7fetNWpfPjg7/Jk39L
MD5 SHA1 SHA512 SSDEEP

Score

4^/10

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\win.ini	b72da637e27c88203a7e13b155752a69.exe

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3428	2192	WerFault.exe	87

C:\Users\Admin\AppData\Local\Temp\b72da637e27c88203a7e13b155752a69.exe
"C:\Users\Admin\AppData\Local\Temp\b72da637e27c88203a7e13b155752a69.exe"
1⤵
- Drops file in Windows directory
PID:2192
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2192 -s 272
  2⤵
  - Program crash
  PID:3428

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 2192 -ip 2192
1⤵
PID:2568

memory/2192-0-0x0000000000400000-0x0000000000427000-memory.dmp

Download

memory/2192-2-0x0000000000400000-0x0000000000427000-memory.dmp

Download