90dffe530ee60a4a69a4217912990bfb497ea20fbcf135d94703e0e26c75818e

Analysis

max time kernel
152s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
01-12-2022 00:51

Target

90dffe530ee60a4a69a4217912990bfb497ea20fbcf135d94703e0e26c75818e.exe
Size

72KB
MD5

cbcfe0e4bf9bd5d6845b54945699eddb
SHA1

5f2a274f65b6457e1b1ccbd25eea21b43270411a
SHA256

90dffe530ee60a4a69a4217912990bfb497ea20fbcf135d94703e0e26c75818e
SHA512

6c7144a47df8f253d01f0d3995bc034864be734f61e2d13a71cb39a3f94b374cac7db82847b4bf0383e9784cdbbcedba5cb8893b9d053e767b73aad21ef80889
SSDEEP

768:vmUn/sgonTZk3jzkkKPI4j7AKlt3Y4YxKTL1Wv5uduUmeEOmr1ArjmHW32:SgonlkzYkKV7A0ExK3yOw1WjmHs

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4444 1044 WerFault.exe 90dffe530ee60a4a69a4217912990bfb497ea20fbcf135d94703e0e26c75818e.exe

pid	pid_target	process	target process
4444	1044	WerFault.exe	90dffe530ee60a4a69a4217912990bfb497ea20fbcf135d94703e0e26c75818e.exe

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

90dffe530ee60a4a69a4217912990bfb497ea20fbcf135d94703e0e26c75818e.exe

pid	process
1044	90dffe530ee60a4a69a4217912990bfb497ea20fbcf135d94703e0e26c75818e.exe
1044	90dffe530ee60a4a69a4217912990bfb497ea20fbcf135d94703e0e26c75818e.exe

C:\Users\Admin\AppData\Local\Temp\90dffe530ee60a4a69a4217912990bfb497ea20fbcf135d94703e0e26c75818e.exe
"C:\Users\Admin\AppData\Local\Temp\90dffe530ee60a4a69a4217912990bfb497ea20fbcf135d94703e0e26c75818e.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1044

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1044 -s 380
2⤵
- Program crash
PID:4444

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 1044 -ip 1044
1⤵
PID:3452

memory/1044-132-0x0000000000400000-0x0000000000412000-memory.dmp

Filesize
72KB

Download