ab98c33ec320148b3f749bb7c8ecd94ee60667c145aaa343c23a39fb6cdde0b6

Analysis

max time kernel
145s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
29-11-2022 17:17

Target

ab98c33ec320148b3f749bb7c8ecd94ee60667c145aaa343c23a39fb6cdde0b6.exe
Size

56KB
MD5

8eb0af5bb58a200b634088fd4e0d0ea2
SHA1

664a337c0d7f42a5fbb8619d6996542f7e836ffe
SHA256

ab98c33ec320148b3f749bb7c8ecd94ee60667c145aaa343c23a39fb6cdde0b6
SHA512

d6f76849ab2f1ff6c516bab3a1143752fb952bcf35707ab31a8cd66046eb0cebbbb903b29aa52d219c074c25cff0c8dc6b77811ad4bc6446b263bc5b862aacd0
SSDEEP

768:17+SRrzWFDo/p8bbOAcDCudBSwFOXoQEmUMOX4J:nRK90CudBSWtc

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
536	5080	WerFault.exe	75

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5080	ab98c33ec320148b3f749bb7c8ecd94ee60667c145aaa343c23a39fb6cdde0b6.exe
5080	ab98c33ec320148b3f749bb7c8ecd94ee60667c145aaa343c23a39fb6cdde0b6.exe

C:\Users\Admin\AppData\Local\Temp\ab98c33ec320148b3f749bb7c8ecd94ee60667c145aaa343c23a39fb6cdde0b6.exe
"C:\Users\Admin\AppData\Local\Temp\ab98c33ec320148b3f749bb7c8ecd94ee60667c145aaa343c23a39fb6cdde0b6.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5080
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5080 -s 532
  2⤵
  - Program crash
  PID:536

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 5080 -ip 5080
1⤵
PID:2400