1cd0420f4ace1df774e7b550ff9d413e89d9e12792b1224e384fbf1abf37e7a4

Analysis

max time kernel
91s
max time network
107s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
21/10/2022, 02:37

Target

1cd0420f4ace1df774e7b550ff9d413e89d9e12792b1224e384fbf1abf37e7a4.exe
Size

107KB
MD5

5044f9b37209262f21d14869efdeb880
SHA1

998a97d86f1ba5d6e2c871e5986808a23d1ad6fd
SHA256

1cd0420f4ace1df774e7b550ff9d413e89d9e12792b1224e384fbf1abf37e7a4
SHA512

75b090dce35dc7f3d2dec651e2873651b0f104115ea1ab50ba10c94dfea9f5a7b820da153844974eff295c61d94b3ad24aa1d8e51d17b57c67660cee20fc3e33
SSDEEP

1536:1PHPU4or4BMySer10tmisnifh4Vdnr0Ru9D8vujqHJM7f70/tF5Ug+6bspt:1PPHBhr1mmzr0Ruy75UgAf

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
416	4788	WerFault.exe	74

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4788	1cd0420f4ace1df774e7b550ff9d413e89d9e12792b1224e384fbf1abf37e7a4.exe

C:\Users\Admin\AppData\Local\Temp\1cd0420f4ace1df774e7b550ff9d413e89d9e12792b1224e384fbf1abf37e7a4.exe
"C:\Users\Admin\AppData\Local\Temp\1cd0420f4ace1df774e7b550ff9d413e89d9e12792b1224e384fbf1abf37e7a4.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4788
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4788 -s 512
  2⤵
  - Program crash
  PID:416

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4788 -ip 4788
1⤵
PID:3656