72c63a3cb3e724e050507322552a9b95e6e5bb0c2e263d1e01c2617de8b8e809

Analysis

max time kernel
90s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
25-11-2022 19:31

Target

72c63a3cb3e724e050507322552a9b95e6e5bb0c2e263d1e01c2617de8b8e809.exe
Size

152KB
MD5

259f12c2f6cfa5becab9184640e77b60
SHA1

6efa488d295cad3dead5518fd6ea43ac562176d4
SHA256

72c63a3cb3e724e050507322552a9b95e6e5bb0c2e263d1e01c2617de8b8e809
SHA512

3468f78531a4ccaffd554415ba42ecc44d3131d8f86a557f82dd76816f5b3522e2c17e378a48ceeecb4ad898b1d260cf913d32eaf7aebeb16770df9a2ede8d23
SSDEEP

1536:c1DMz1DQvXLq6t7awFONecenlLnQHIG5R9c73P600t:9eGw9A0rC00t

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4980 4060 WerFault.exe 72c63a3cb3e724e050507322552a9b95e6e5bb0c2e263d1e01c2617de8b8e809.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

72c63a3cb3e724e050507322552a9b95e6e5bb0c2e263d1e01c2617de8b8e809.exe

pid process

4060 72c63a3cb3e724e050507322552a9b95e6e5bb0c2e263d1e01c2617de8b8e809.exe

pid	pid_target	process	target process
4980	4060	WerFault.exe	72c63a3cb3e724e050507322552a9b95e6e5bb0c2e263d1e01c2617de8b8e809.exe

pid	process
4060	72c63a3cb3e724e050507322552a9b95e6e5bb0c2e263d1e01c2617de8b8e809.exe

C:\Users\Admin\AppData\Local\Temp\72c63a3cb3e724e050507322552a9b95e6e5bb0c2e263d1e01c2617de8b8e809.exe
"C:\Users\Admin\AppData\Local\Temp\72c63a3cb3e724e050507322552a9b95e6e5bb0c2e263d1e01c2617de8b8e809.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4060

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4060 -s 468
2⤵
- Program crash
PID:4980

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4060 -ip 4060
1⤵
PID:4920