6eb9bb7518056bcbbda9567bddb9c0b48d5017884dc9876d40431a7f3e0988f7

Analysis

max time kernel
91s
max time network
133s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
07/11/2022, 01:19

Target

6eb9bb7518056bcbbda9567bddb9c0b48d5017884dc9876d40431a7f3e0988f7.exe
Size

73KB
MD5

2fd925cfe3e01e341010882bdb674689
SHA1

a2a01b89a9b1f10127187d2e7dfa1ec6f2543717
SHA256

6eb9bb7518056bcbbda9567bddb9c0b48d5017884dc9876d40431a7f3e0988f7
SHA512

f99b17a1aca5c830dbbccd9b038810a8917cb86ba0e2e710de4e7b23869d47058d1228505d0d26fe5f099ec83e5fb500ab993152a99f19a83f3d381a75a136f2
SSDEEP

1536:pPL30FzXG+9kz62hE52R8pZ0Fxf/1KNZ59NKln9msMoK15MfHOXM:pQ2thE52R8pSf/1KN9NKln9m15MfU

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5008	4752	WerFault.exe	82

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4752	6eb9bb7518056bcbbda9567bddb9c0b48d5017884dc9876d40431a7f3e0988f7.exe

C:\Users\Admin\AppData\Local\Temp\6eb9bb7518056bcbbda9567bddb9c0b48d5017884dc9876d40431a7f3e0988f7.exe
"C:\Users\Admin\AppData\Local\Temp\6eb9bb7518056bcbbda9567bddb9c0b48d5017884dc9876d40431a7f3e0988f7.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4752
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4752 -s 536
  2⤵
  - Program crash
  PID:5008

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4752 -ip 4752
1⤵
PID:864