1171232cff81d4a6b091cbf5b4bbfb1b514427832f36e676b812642c8e65c272

Analysis

max time kernel
102s
max time network
104s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
23/07/2024, 03:04

Target
56c4da056b918952c2273f3b12acc090N.exe
Size 700KB
Sample240723-dk3lcstgmf
SHA256 1171232cff81d4a6b091cbf5b4bbfb1b514427832f36e676b812642c8e65c272
MD5 56c4da056b918952c2273f3b12acc090
SHA1 9ba48f99ef89acdf5a067a52c7cacbda6d133a48
SHA512 78f281934d4e351ee7b731bd16d6d1edaf5408afe0f83ed62ad9faca0776c0affaf6ce6872e1db2eed7db91c8f5c6c8387e36e818aa77ad42d8296a0e7fc1b1c
SSDEEP 6144:WkgiPA6RtP1aAfbAfNtTAfMAfFAfNx23DsMfs921aAfbAfNtTAfMAfFAfN:iiPfmNtuhUNxG5EwmNtuhUN
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4392	3680	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\56c4da056b918952c2273f3b12acc090N.exe
"C:\Users\Admin\AppData\Local\Temp\56c4da056b918952c2273f3b12acc090N.exe"
1⤵
PID:3680
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3680 -s 216
  2⤵
  - Program crash
  PID:4392

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3680 -ip 3680
1⤵
PID:2200

memory/3680-0-0x0000000000400000-0x00000000004AF000-memory.dmp

Download

memory/3680-1-0x0000000000400000-0x00000000004AF000-memory.dmp

Download