a71818ba4cd451b4c84579fb77141428ddc37d6b6a7a5d64d3b1d8b4c74c95f7

Analysis

max time kernel
91s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
25-11-2022 19:31

Target

a71818ba4cd451b4c84579fb77141428ddc37d6b6a7a5d64d3b1d8b4c74c95f7.exe
Size

152KB
MD5

06e0df1c492f80eb535c495230c45550
SHA1

c1629ca1c5880b9359708a89db03538b45dd4e29
SHA256

a71818ba4cd451b4c84579fb77141428ddc37d6b6a7a5d64d3b1d8b4c74c95f7
SHA512

a7d8af3d3b2d97d49756c7a1d2067dfa58e4cab87c3bea5b87bcb1187f10a27de1404c6b2862a0229af3395a5f1a8bed790e567360fc8e98a6b680d5a74234b1
SSDEEP

1536:c1DMz1DQvXLq6t7awFONecenlLnQHIG5R9c73P600t:9eGw9A0rC00t

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3628 4204 WerFault.exe a71818ba4cd451b4c84579fb77141428ddc37d6b6a7a5d64d3b1d8b4c74c95f7.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

a71818ba4cd451b4c84579fb77141428ddc37d6b6a7a5d64d3b1d8b4c74c95f7.exe

pid process

4204 a71818ba4cd451b4c84579fb77141428ddc37d6b6a7a5d64d3b1d8b4c74c95f7.exe

pid	pid_target	process	target process
3628	4204	WerFault.exe	a71818ba4cd451b4c84579fb77141428ddc37d6b6a7a5d64d3b1d8b4c74c95f7.exe

pid	process
4204	a71818ba4cd451b4c84579fb77141428ddc37d6b6a7a5d64d3b1d8b4c74c95f7.exe

C:\Users\Admin\AppData\Local\Temp\a71818ba4cd451b4c84579fb77141428ddc37d6b6a7a5d64d3b1d8b4c74c95f7.exe
"C:\Users\Admin\AppData\Local\Temp\a71818ba4cd451b4c84579fb77141428ddc37d6b6a7a5d64d3b1d8b4c74c95f7.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4204

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4204 -s 464
2⤵
- Program crash
PID:3628

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4204 -ip 4204
1⤵
PID:5040