ebff9f1991b03023deb1be8bb11cec5ecc62758f79407b82baf13d41497becba

Analysis

max time kernel
136s
max time network
179s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
19/10/2022, 13:32

Target

ebff9f1991b03023deb1be8bb11cec5ecc62758f79407b82baf13d41497becba.exe
Size

64KB
MD5

82df028df4fdb6888a5caefc1cea1c94
SHA1

e47579012cb58dd2c8548ed0c8b4da005b7b8fed
SHA256

ebff9f1991b03023deb1be8bb11cec5ecc62758f79407b82baf13d41497becba
SHA512

0c76d703956d065fc885254718f839c0e7dcfc385e519c1e4da2dc6da48342d6b22a8536ed0003ea2ceca733a680316412fed3349fb2e5535aca6050407da94b
SSDEEP

768:M3T0iZ7ZmGDbhxUeMQQigRUttp55ovopVWwI9k1l9hRvhGXo:M3T0i5gd8v5jp8wI9g/REX

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4720	4580	WerFault.exe	78

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4580	ebff9f1991b03023deb1be8bb11cec5ecc62758f79407b82baf13d41497becba.exe

C:\Users\Admin\AppData\Local\Temp\ebff9f1991b03023deb1be8bb11cec5ecc62758f79407b82baf13d41497becba.exe
"C:\Users\Admin\AppData\Local\Temp\ebff9f1991b03023deb1be8bb11cec5ecc62758f79407b82baf13d41497becba.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4580
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4580 -s 660
  2⤵
  - Program crash
  PID:4720

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4580 -ip 4580
1⤵
PID:3164