6cbdc7b32de7ad74f26b260a0e9c6477ac630bc4e535c7d57f5adb6147f4fc16

Analysis

max time kernel
36s
max time network
38s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
17-06-2024 06:02

Target

TDLoader.exe
Size

903KB
MD5

735843a88c00cb5d1e543b8b415fedae
SHA1

b2a2ffeacc84ad561aeb6211cae8310e9b080fa4
SHA256

6cbdc7b32de7ad74f26b260a0e9c6477ac630bc4e535c7d57f5adb6147f4fc16
SHA512

c09f7e4cbee58253f884dbbbd731616de4b1452d47f4fcae549697d1a189a6e57b03d44d718b80f4c0abf059f8027dc518dee40fc2d9e070bc762a9ce7dc3a79
SSDEEP

12288:RpzYjf6ne5t4vVc5mbljYDuRm/e5t4vVc5mbljYDuRmg5t4vVc5mbljYDuRmb:DnbAmmCsbAmmCKAmmCG

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4568	2648	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\TDLoader.exe
"C:\Users\Admin\AppData\Local\Temp\TDLoader.exe"
1⤵
PID:2648
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2648 -s 1056
  2⤵
  - Program crash
  PID:4568

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2648 -ip 2648
1⤵
PID:1408

memory/2648-0-0x000000007461E000-0x000000007461F000-memory.dmp

Filesize
4KB

Download
memory/2648-1-0x0000000000630000-0x0000000000716000-memory.dmp

Filesize
920KB

Download
memory/2648-2-0x00000000057C0000-0x0000000005D64000-memory.dmp

Filesize
5.6MB

Download
memory/2648-3-0x0000000005120000-0x00000000051B2000-memory.dmp

Filesize
584KB

Download
memory/2648-4-0x00000000050A0000-0x00000000050B2000-memory.dmp

Filesize
72KB

Download
memory/2648-6-0x0000000074610000-0x0000000074DC0000-memory.dmp

Filesize
7.7MB

Download
memory/2648-5-0x00000000051E0000-0x00000000051EA000-memory.dmp

Filesize
40KB

Download
memory/2648-7-0x0000000074610000-0x0000000074DC0000-memory.dmp

Filesize
7.7MB

Download