22d0bc0d10bed5b8cd7ea7c866a982c3b38274be1998d4ef89ace90269e21820

Analysis

max time kernel
205s
max time network
216s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 14:47

Target

22d0bc0d10bed5b8cd7ea7c866a982c3b38274be1998d4ef89ace90269e21820.exe
Size

527KB
MD5

a67e4139cb4e74a003553089528f7ad1
SHA1

6cd875b1c6e41f7e265c5acb014c9fa457c41fdb
SHA256

22d0bc0d10bed5b8cd7ea7c866a982c3b38274be1998d4ef89ace90269e21820
SHA512

a41ed54aaf3790c8cbc68fdbba36f89b50cbbada09aef625f60b68e652f0fe0af86d890a5ac5cc741ddc344359bf46cc794abdec77828cb88bc2b8d4efc6f20d
SSDEEP

12288:ZJVb8L4MtfjkopdqK/QRnp1w9cZJBYP543g4qXf3k:ZJVb0BfpdqKoR3wiZJBYG3gbvk

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2176 2352 WerFault.exe 22d0bc0d10bed5b8cd7ea7c866a982c3b38274be1998d4ef89ace90269e21820.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

22d0bc0d10bed5b8cd7ea7c866a982c3b38274be1998d4ef89ace90269e21820.exe

pid process

2352 22d0bc0d10bed5b8cd7ea7c866a982c3b38274be1998d4ef89ace90269e21820.exe

pid	pid_target	process	target process
2176	2352	WerFault.exe	22d0bc0d10bed5b8cd7ea7c866a982c3b38274be1998d4ef89ace90269e21820.exe

pid	process
2352	22d0bc0d10bed5b8cd7ea7c866a982c3b38274be1998d4ef89ace90269e21820.exe

C:\Users\Admin\AppData\Local\Temp\22d0bc0d10bed5b8cd7ea7c866a982c3b38274be1998d4ef89ace90269e21820.exe
"C:\Users\Admin\AppData\Local\Temp\22d0bc0d10bed5b8cd7ea7c866a982c3b38274be1998d4ef89ace90269e21820.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2352

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2352 -s 308
2⤵
- Program crash
PID:2176

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 204 -p 2352 -ip 2352
1⤵
PID:3768