f07100e28b74fef8ec2fa59200c1da8f89baf6da446284416f9282a28b21ce30

Analysis

max time kernel
139s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
29/10/2022, 21:46

Target

f07100e28b74fef8ec2fa59200c1da8f89baf6da446284416f9282a28b21ce30.exe
Size

1000KB
MD5

848c0e30681ed91412a64ceb1a8bd5a6
SHA1

07c86a54188112f0f6341f4abbb1d9c2670f0fc8
SHA256

f07100e28b74fef8ec2fa59200c1da8f89baf6da446284416f9282a28b21ce30
SHA512

050e9b89f0c73964c7e7bd699b3ce60b0f2c40b2f1ceb89767520eaf13103205e63aa30056ba9e6155894d6060b1a341a9f1a45fa6f27000273a2b8686748a47
SSDEEP

24576:tUk36eBLC3fIyG/ESoAclIdpv8s5c3/0dPM:tUw7BLC3fIy6X8s5cPOPM

Score

3^/10

Program crash 3 IoCs

pid	pid_target	Process	procid_target
1928	4788	WerFault.exe	83
2580	4788	WerFault.exe	83
3392	4788	WerFault.exe	83

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4788	f07100e28b74fef8ec2fa59200c1da8f89baf6da446284416f9282a28b21ce30.exe
4788	f07100e28b74fef8ec2fa59200c1da8f89baf6da446284416f9282a28b21ce30.exe

C:\Users\Admin\AppData\Local\Temp\f07100e28b74fef8ec2fa59200c1da8f89baf6da446284416f9282a28b21ce30.exe
"C:\Users\Admin\AppData\Local\Temp\f07100e28b74fef8ec2fa59200c1da8f89baf6da446284416f9282a28b21ce30.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4788
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4788 -s 460
  2⤵
  - Program crash
  PID:1928
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4788 -s 464
  2⤵
  - Program crash
  PID:2580
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4788 -s 480
  2⤵
  - Program crash
  PID:3392

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 4788 -ip 4788
1⤵
PID:2140

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4788 -ip 4788
1⤵
PID:3340

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 4788 -ip 4788
1⤵
PID:3924