27c761c698cb19107cd86c25df5a1762dac4a15c9276dd8dd77a91f8e06d166c

Analysis

max time kernel
148s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
03/10/2022, 21:36

Target
27c761c698cb19107cd86c25df5a1762dac4a15c9276dd8dd77a91f8e06d166c.exe
Size 952KB
Sample221003-1f2jtsgee4
SHA256 27c761c698cb19107cd86c25df5a1762dac4a15c9276dd8dd77a91f8e06d166c
MD5 021a9f22bce1aa43f69d4bf5641766d0
SHA1 ab411b25d9f6494c59e2c28a68c5dd54ba9a912b
SHA512 5806c88c1e0ed6e6c68414df891d9435feb07e07c316be1c83ee188d16da08175c5d5fc743664e750d71849d927a329c1f28b670c228ac2efd8d2b179775187b
SSDEEP 12288:byyy7Z3z4I8NXOGjwwG/ZjXsAHHz79p9NM5Tz103j2CF4TxQUOfhVPOSAE//VAci:baCI2OewFJN4mkxyHnnew1SatLRzD
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
320	2032	WerFault.exe	84

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2032	27c761c698cb19107cd86c25df5a1762dac4a15c9276dd8dd77a91f8e06d166c.exe

C:\Users\Admin\AppData\Local\Temp\27c761c698cb19107cd86c25df5a1762dac4a15c9276dd8dd77a91f8e06d166c.exe
"C:\Users\Admin\AppData\Local\Temp\27c761c698cb19107cd86c25df5a1762dac4a15c9276dd8dd77a91f8e06d166c.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2032
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2032 -s 464
  2⤵
  - Program crash
  PID:320

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 2032 -ip 2032
1⤵
PID:3152