1523bb02ea787afa2f5479338cc6be2d674a46122e0b593859f526bed54ff0fd

Analysis

max time kernel
142s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03/10/2022, 06:27

Target

1523bb02ea787afa2f5479338cc6be2d674a46122e0b593859f526bed54ff0fd.exe
Size

952KB
MD5

4d13d0f9577e3d1fc570cd8b79b8da00
SHA1

bba18ae3aef52234643053e67e4eff68087f17b0
SHA256

1523bb02ea787afa2f5479338cc6be2d674a46122e0b593859f526bed54ff0fd
SHA512

3f28c970005113fa5306c9ee84a089bb9d821912fbace14ed72936e16354e6e5544d4ba2da46a05a17d70c907cba398d3b45cb93653d0a4224327056d1927dab
SSDEEP

12288:byyy7Z3z4I8NXOGjwwG/ZjXsAHHz79p9NM5Tz103j2CF4TxQUOfhVPOSAE//VAci:baCI2OewFJN4mkxyHnnew1SatLRzD

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5060	4620	WerFault.exe	79

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4620	1523bb02ea787afa2f5479338cc6be2d674a46122e0b593859f526bed54ff0fd.exe

C:\Users\Admin\AppData\Local\Temp\1523bb02ea787afa2f5479338cc6be2d674a46122e0b593859f526bed54ff0fd.exe
"C:\Users\Admin\AppData\Local\Temp\1523bb02ea787afa2f5479338cc6be2d674a46122e0b593859f526bed54ff0fd.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4620
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4620 -s 464
  2⤵
  - Program crash
  PID:5060

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4620 -ip 4620
1⤵
PID:4972