d7ab77f27b068c1a03266caa077c1b2174a095c9cedab40d672c01894493b8b2

Analysis

max time kernel
118s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
26-11-2022 06:48

Target

d7ab77f27b068c1a03266caa077c1b2174a095c9cedab40d672c01894493b8b2.exe
Size

152KB
MD5

a33e339654d74c325295b19b29e3f1d0
SHA1

eb7e2f06808efa30567c715f67e0d8fc118813a2
SHA256

d7ab77f27b068c1a03266caa077c1b2174a095c9cedab40d672c01894493b8b2
SHA512

4d2278c71c49838b9ae8701445d49bfa375491d8179184e4cba3c8ae8dee5bdb7a8d480215cc56bd2cfbf67d9d2d4edfcc6d30583d30ef1490b6c05ddc6934ab
SSDEEP

1536:c1DMz1DQvXLq6t7awFONecenlLnQHIG5R9c73P600t:9eGw9A0rC00t

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3672 5028 WerFault.exe d7ab77f27b068c1a03266caa077c1b2174a095c9cedab40d672c01894493b8b2.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

d7ab77f27b068c1a03266caa077c1b2174a095c9cedab40d672c01894493b8b2.exe

pid process

5028 d7ab77f27b068c1a03266caa077c1b2174a095c9cedab40d672c01894493b8b2.exe

pid	pid_target	process	target process
3672	5028	WerFault.exe	d7ab77f27b068c1a03266caa077c1b2174a095c9cedab40d672c01894493b8b2.exe

pid	process
5028	d7ab77f27b068c1a03266caa077c1b2174a095c9cedab40d672c01894493b8b2.exe

C:\Users\Admin\AppData\Local\Temp\d7ab77f27b068c1a03266caa077c1b2174a095c9cedab40d672c01894493b8b2.exe
"C:\Users\Admin\AppData\Local\Temp\d7ab77f27b068c1a03266caa077c1b2174a095c9cedab40d672c01894493b8b2.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5028

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5028 -s 464
2⤵
- Program crash
PID:3672

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 5028 -ip 5028
1⤵
PID:1944