215034b7ca273c5dd215de82b55e86b4061656c8778357e5e49bc15884e0f0dd

Analysis

max time kernel
14s
max time network
17s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
29/10/2022, 23:40

Target

215034b7ca273c5dd215de82b55e86b4061656c8778357e5e49bc15884e0f0dd.exe
Size

144KB
MD5

83e8b02d72c87b4b5215c14aade2f811
SHA1

060b1b6548acb019a917c0fa418a197fafa68b42
SHA256

215034b7ca273c5dd215de82b55e86b4061656c8778357e5e49bc15884e0f0dd
SHA512

e73f8428a5b340218adc44c9274e0a6ee5df41db2c0fab84619d0c19807510a31c9bf4b36443a994140b011a98b7efd56738bd0f671528633867802104abb2bd
SSDEEP

1536:wLUAcWQa+NWAKxFN1Gt5+tW36jOpB6BYaqL2He4j/SuN6qCjnKpiFZunZv2882AP:wLUEaIO/ZDa+4ejeiFZuUC5I9DjEbscg

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4612	3896	WerFault.exe	77

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3896	215034b7ca273c5dd215de82b55e86b4061656c8778357e5e49bc15884e0f0dd.exe

C:\Users\Admin\AppData\Local\Temp\215034b7ca273c5dd215de82b55e86b4061656c8778357e5e49bc15884e0f0dd.exe
"C:\Users\Admin\AppData\Local\Temp\215034b7ca273c5dd215de82b55e86b4061656c8778357e5e49bc15884e0f0dd.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3896
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3896 -s 464
  2⤵
  - Program crash
  PID:4612

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 3896 -ip 3896
1⤵
PID:4672

memory/3896-132-0x0000000000400000-0x000000000041C000-memory.dmp

Filesize
112KB

Download
memory/3896-135-0x0000000000400000-0x000000000041C000-memory.dmp

Filesize
112KB

Download
memory/3896-136-0x0000000000400000-0x000000000041C000-memory.dmp

Filesize
112KB

Download