03bbd96f5efc843ff058c4aa527f07bf0b1f869fecb67a1243d54f96e8f108fa

Analysis

max time kernel
91s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
19/10/2022, 14:05

Target

03bbd96f5efc843ff058c4aa527f07bf0b1f869fecb67a1243d54f96e8f108fa.exe
Size

156KB
MD5

9179580a18303efdc6718e15de4fbac0
SHA1

bd39bf9b3b01534e28b8e266fc1f7dbdafe2e65b
SHA256

03bbd96f5efc843ff058c4aa527f07bf0b1f869fecb67a1243d54f96e8f108fa
SHA512

d43cb4a7169f5a756d67e85aeffe0d3577564ba0e98b34af8ca2078746b79df29e0691ec3a4823e92e1f71c583ca5ca0e8f8c2e3630ae485d874a3ec215e6eb5
SSDEEP

1536:wWEnMlq9hkJaNhAdPt9w3f85KmCivE48yIN3HUOwirIUuEpmAhjiGs:0MlkkJaNhswy2pmAFiGs

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2508	2368	WerFault.exe	79

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2368	03bbd96f5efc843ff058c4aa527f07bf0b1f869fecb67a1243d54f96e8f108fa.exe

C:\Users\Admin\AppData\Local\Temp\03bbd96f5efc843ff058c4aa527f07bf0b1f869fecb67a1243d54f96e8f108fa.exe
"C:\Users\Admin\AppData\Local\Temp\03bbd96f5efc843ff058c4aa527f07bf0b1f869fecb67a1243d54f96e8f108fa.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2368
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2368 -s 488
  2⤵
  - Program crash
  PID:2508

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2368 -ip 2368
1⤵
PID:2164