5f77820a216c11967c35f8abcd89531b94009df06fd7cd6494675750f2188696

Analysis

max time kernel
139s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
03/05/2024, 05:08

Target

Frachtbrief.exe
Size

950KB
MD5

bbe19513f246c2ce20a942aac0c6734c
SHA1

ea1f006b677588e451288af724462302ce26fe10
SHA256

c64350d1fb8dfa16c69882ed5ae2d5cb5dd9301e4db24817fdec93df2b20b120
SHA512

256dd2ca23f9fc65b5422aa388d30b7f9956b74413b717cbc3d42449a8ebaeb82498fada6e35ffd30b79dd638394cd10a5e5aee085d77c07329bbea015065967
SSDEEP

24576:UOBHtIiz6aFpMdGjyupSMyhICpRj/LPO6GjAlckeo:FtI5oeup/3yB/LP7qAlcke

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4760	216	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\Frachtbrief.exe
"C:\Users\Admin\AppData\Local\Temp\Frachtbrief.exe"
1⤵
PID:216
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 216 -s 936
  2⤵
  - Program crash
  PID:4760

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 216 -ip 216
1⤵
PID:3392

memory/216-0-0x0000000074C6E000-0x0000000074C6F000-memory.dmp

Filesize
4KB

Download
memory/216-1-0x0000000000E80000-0x0000000000F74000-memory.dmp

Filesize
976KB

Download
memory/216-2-0x00000000058F0000-0x0000000005982000-memory.dmp

Filesize
584KB

Download
memory/216-3-0x0000000074C60000-0x0000000075410000-memory.dmp

Filesize
7.7MB

Download
memory/216-4-0x0000000074C60000-0x0000000075410000-memory.dmp

Filesize
7.7MB

Download