aa2e228f4866bb804f5389c43a4ee34605a6f800fb7e53deb83579a1d4949661

Analysis

max time kernel
91s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
14/10/2022, 10:21

Target

aa2e228f4866bb804f5389c43a4ee34605a6f800fb7e53deb83579a1d4949661.exe
Size

251KB
MD5

60b2925422fa61fa31a1b313041a6ff5
SHA1

d4d3a09b41ee89a62a38d24c85b683fdf53649be
SHA256

aa2e228f4866bb804f5389c43a4ee34605a6f800fb7e53deb83579a1d4949661
SHA512

f1fc26c8d9023add3508c3ca1f6a7031aa3166cf30b8665d1beca4780266285eec7973508f443c2125873eaebe6a9c501160d7c29df9b39bc4f6f67a18039318
SSDEEP

6144:KMJR7WBTsZ9/5JFnjWsUQQqM/nSfmiO9RukRaxLDwcw5/xTxqCdyEjQb4FLH+JXY:KRFmhJBj1UQQqM/nSfmiO9RfRa2VzyED

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
628	2168	WerFault.exe	48

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2168	aa2e228f4866bb804f5389c43a4ee34605a6f800fb7e53deb83579a1d4949661.exe

C:\Users\Admin\AppData\Local\Temp\aa2e228f4866bb804f5389c43a4ee34605a6f800fb7e53deb83579a1d4949661.exe
"C:\Users\Admin\AppData\Local\Temp\aa2e228f4866bb804f5389c43a4ee34605a6f800fb7e53deb83579a1d4949661.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2168
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2168 -s 468
  2⤵
  - Program crash
  PID:628

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 2168 -ip 2168
1⤵
PID:1684