de89f5b0d8e438e8f371a35f9de7dd125c9fe7cddf792805dacb806a1c3e98b6

Analysis

max time kernel
91s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
27/11/2022, 14:47

Target

E-Card_zu_Weichnachten_scan_foto_2834792347_12_2014_21093812_000129_001_004_002910.exe
Size

156KB
MD5

42b5b68762ac414801fea5c7d45a34ae
SHA1

5069f989b49a36b3b209587d33593283941d5443
SHA256

f237172dad00a6c2bc66c8f1bdf6cbbd7d5052f07ea672d56020fbf9afb56268
SHA512

d0c40232668898bd39df9535698239f1ea317b5a1b0c88d70939a396a1436e1b9908579ba33c172a27212aea9599133ef8ed200f9682143c5b6f816547349239
SSDEEP

3072:Q2Vp57emoDmj9Cms691POVpvvGW8iE3mxG2CmUquEsSgAq:zVp56mEEVs61POVVZ8iEUCB+g9

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1456	2808	WerFault.exe	82

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2808	E-Card_zu_Weichnachten_scan_foto_2834792347_12_2014_21093812_000129_001_004_002910.exe

C:\Users\Admin\AppData\Local\Temp\E-Card_zu_Weichnachten_scan_foto_2834792347_12_2014_21093812_000129_001_004_002910.exe
"C:\Users\Admin\AppData\Local\Temp\E-Card_zu_Weichnachten_scan_foto_2834792347_12_2014_21093812_000129_001_004_002910.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2808
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2808 -s 404
  2⤵
  - Program crash
  PID:1456

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 2808 -ip 2808
1⤵
PID:4844