2bfe293b13ee52f81320c6451d1fcd822bf3eeadf3c8cb12ba01d731936a83da

Analysis

max time kernel
90s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
29/10/2022, 16:11

Target

2bfe293b13ee52f81320c6451d1fcd822bf3eeadf3c8cb12ba01d731936a83da.exe
Size

64KB
MD5

8497b8b0d79d29dc848336102520ec80
SHA1

77012cff55d72b695a5a6700c99132ffe34400f7
SHA256

2bfe293b13ee52f81320c6451d1fcd822bf3eeadf3c8cb12ba01d731936a83da
SHA512

2d5aff1feb02634c1d86fd03c76ced026a5be826833ded34dbb74a5377ef40f4dc4784d14b3f6bb04c5b077d17cd9477c2e5794bcfc18fc1519db43a2ff72a3f
SSDEEP

768:LfCS04EpnIPz8v96hkbObB5w0ocEnaLj8+IBfCylsCclAYbpzX2:Lf/044I78v969EnaLj8bh+l1

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2072	1340	WerFault.exe	72

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1340	2bfe293b13ee52f81320c6451d1fcd822bf3eeadf3c8cb12ba01d731936a83da.exe

C:\Users\Admin\AppData\Local\Temp\2bfe293b13ee52f81320c6451d1fcd822bf3eeadf3c8cb12ba01d731936a83da.exe
"C:\Users\Admin\AppData\Local\Temp\2bfe293b13ee52f81320c6451d1fcd822bf3eeadf3c8cb12ba01d731936a83da.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1340
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1340 -s 516
  2⤵
  - Program crash
  PID:2072

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 1340 -ip 1340
1⤵
PID:508