6e03edbc834e06ee6ebb0204d2a6b2cbad57165231feccba7c53b24c316e08ea

Analysis

max time kernel
91s
max time network
130s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 16:50

Target

6e03edbc834e06ee6ebb0204d2a6b2cbad57165231feccba7c53b24c316e08ea.exe
Size

312KB
MD5

59049f19797afff5682355a734387cb0
SHA1

4d6ad6e2038a57e5856be1c9ab8bc19d20076d30
SHA256

6e03edbc834e06ee6ebb0204d2a6b2cbad57165231feccba7c53b24c316e08ea
SHA512

4942ccb0cfaa62b4bf4d61e73f390488cf51ec6b30ec6401ae7357b3e1c32214312bcce520f41c2870ef8d9d79c45fffd225218d4aa0d274c3c4318523fa1c2d
SSDEEP

6144:U0JYtXpSuhRjAfpVzs+txf3myzc9f35Q67l1tR0CugEv5CkFi:fJwXpSuhR0fDs+tUsc9f3b3BrEBli

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4828 3840 WerFault.exe 6e03edbc834e06ee6ebb0204d2a6b2cbad57165231feccba7c53b24c316e08ea.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

6e03edbc834e06ee6ebb0204d2a6b2cbad57165231feccba7c53b24c316e08ea.exe

pid process

3840 6e03edbc834e06ee6ebb0204d2a6b2cbad57165231feccba7c53b24c316e08ea.exe

pid	pid_target	process	target process
4828	3840	WerFault.exe	6e03edbc834e06ee6ebb0204d2a6b2cbad57165231feccba7c53b24c316e08ea.exe

pid	process
3840	6e03edbc834e06ee6ebb0204d2a6b2cbad57165231feccba7c53b24c316e08ea.exe

C:\Users\Admin\AppData\Local\Temp\6e03edbc834e06ee6ebb0204d2a6b2cbad57165231feccba7c53b24c316e08ea.exe
"C:\Users\Admin\AppData\Local\Temp\6e03edbc834e06ee6ebb0204d2a6b2cbad57165231feccba7c53b24c316e08ea.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3840
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3840 -s 464
  2⤵
  - Program crash
  PID:4828

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 3840 -ip 3840
1⤵
PID:3992