abbafb04c15ce43ef9c7543ed7465407ca058e40882cbc82d56df18a22505350

Analysis

max time kernel
154s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03/10/2022, 22:36

Target

abbafb04c15ce43ef9c7543ed7465407ca058e40882cbc82d56df18a22505350.exe
Size

72KB
MD5

387e2bec17804a5c65e5c717697e918f
SHA1

7950fbf03f00d81f28e2ead89353c8c7832685b0
SHA256

abbafb04c15ce43ef9c7543ed7465407ca058e40882cbc82d56df18a22505350
SHA512

b554264340cfe62df8fba51862f026d7aaf36228e9bf3b93e86d2ab559981128e885c63273171a8d02803d22e41159d6898d1904b0f2d44401215b96b7e0dadf
SSDEEP

1536:Jd+hjRou5tGEK9cuYtWhiuRxYnc8O+jnLik4:Jd+WhiuRxYcsnr4

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1508	4616	WerFault.exe	14

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4616	abbafb04c15ce43ef9c7543ed7465407ca058e40882cbc82d56df18a22505350.exe

C:\Users\Admin\AppData\Local\Temp\abbafb04c15ce43ef9c7543ed7465407ca058e40882cbc82d56df18a22505350.exe
"C:\Users\Admin\AppData\Local\Temp\abbafb04c15ce43ef9c7543ed7465407ca058e40882cbc82d56df18a22505350.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4616
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4616 -s 752
  2⤵
  - Program crash
  PID:1508

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4616 -ip 4616
1⤵
PID:2768