0bcc9deee53c2f2ba6facf71ca96609d7ada6e7db9911b502d3660852dccb7f5

Analysis

max time kernel
119s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
07/11/2022, 20:48

Target

0bcc9deee53c2f2ba6facf71ca96609d7ada6e7db9911b502d3660852dccb7f5.exe
Size

220KB
MD5

0e4382d7dc2ef1c54d2e00cb0e3c5944
SHA1

5856c2b3a4da277a6ac2636b2e4720fdfaf6dcff
SHA256

0bcc9deee53c2f2ba6facf71ca96609d7ada6e7db9911b502d3660852dccb7f5
SHA512

42bc438c7607adaa4e0ba8a60d5e2c6e3fe8523a46d7f18f1bf0d5cc17636897750945e060b366f93b9643c2cd13027dcd97cfb6cafd6576835f765884d78197
SSDEEP

3072:bNJIxSC28g3Vgypib1Jf5PNRP9RZfeGEVbN:3IsC28gFgypiZvLZfeG4

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3700	2268	WerFault.exe	80

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2268	0bcc9deee53c2f2ba6facf71ca96609d7ada6e7db9911b502d3660852dccb7f5.exe

C:\Users\Admin\AppData\Local\Temp\0bcc9deee53c2f2ba6facf71ca96609d7ada6e7db9911b502d3660852dccb7f5.exe
"C:\Users\Admin\AppData\Local\Temp\0bcc9deee53c2f2ba6facf71ca96609d7ada6e7db9911b502d3660852dccb7f5.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2268
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2268 -s 688
  2⤵
  - Program crash
  PID:3700

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 2268 -ip 2268
1⤵
PID:2056