76b28dad6f47e3109b17b6dbb667010384fe8642ea9974717ab3671ce4bb8348

Analysis

max time kernel
170s
max time network
191s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
24-11-2022 00:17

Target

76b28dad6f47e3109b17b6dbb667010384fe8642ea9974717ab3671ce4bb8348.exe
Size

255KB
MD5

35b02c3d82ce19d30260923cf78d489b
SHA1

f7f3fb7c1303eb738299965336ce90c994ac908c
SHA256

76b28dad6f47e3109b17b6dbb667010384fe8642ea9974717ab3671ce4bb8348
SHA512

fb0fa4136d0fd34d3dd507253bacdaf817319615a8a10d2e8e35d1d7256ded87dca171429c423a2294fd2c59b1e94b4a4c3206286c7acf22871bd6d85918b837
SSDEEP

6144:NOMZgBmcudxub3FX8xfS/eqHx8Pa6Bda6C9L1OjmXDmuY1NOHpZEiKrXy8BFnotu:NOIJiJ89SmqHx8Pa6Bda6C9L1Ojmzmuq

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2068 4296 WerFault.exe 76b28dad6f47e3109b17b6dbb667010384fe8642ea9974717ab3671ce4bb8348.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

76b28dad6f47e3109b17b6dbb667010384fe8642ea9974717ab3671ce4bb8348.exe

pid process

4296 76b28dad6f47e3109b17b6dbb667010384fe8642ea9974717ab3671ce4bb8348.exe

pid	pid_target	process	target process
2068	4296	WerFault.exe	76b28dad6f47e3109b17b6dbb667010384fe8642ea9974717ab3671ce4bb8348.exe

pid	process
4296	76b28dad6f47e3109b17b6dbb667010384fe8642ea9974717ab3671ce4bb8348.exe

C:\Users\Admin\AppData\Local\Temp\76b28dad6f47e3109b17b6dbb667010384fe8642ea9974717ab3671ce4bb8348.exe
"C:\Users\Admin\AppData\Local\Temp\76b28dad6f47e3109b17b6dbb667010384fe8642ea9974717ab3671ce4bb8348.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4296

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4296 -s 492
2⤵
- Program crash
PID:2068

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 4296 -ip 4296
1⤵
PID:872