cebbc87b1bc54ce6690ede040648a41998acee9b68de7d1ad8bad0124397a640

Analysis

max time kernel
157s
max time network
177s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
02/12/2022, 21:12

Target

cebbc87b1bc54ce6690ede040648a41998acee9b68de7d1ad8bad0124397a640.exe
Size

400KB
MD5

8ea7bb240185474e7a6ceb58b45baef3
SHA1

632001d32384c1e63950498c51878e53acc72a15
SHA256

cebbc87b1bc54ce6690ede040648a41998acee9b68de7d1ad8bad0124397a640
SHA512

566faaabc6dacb433482e3f836ef6ce1425831804a23fd8b0c72d55ca99bc7f9a639a3bfb9e0a071eeddce9182ef938b0b565465c63da4d04634794b69b274e8
SSDEEP

12288:011DEpEF52/BQRiQCKCC/MyYjWVxjAiO4CNY:w1oKFMIi1KdQ6xjAT

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1980	1668	WerFault.exe	79

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1668	cebbc87b1bc54ce6690ede040648a41998acee9b68de7d1ad8bad0124397a640.exe

C:\Users\Admin\AppData\Local\Temp\cebbc87b1bc54ce6690ede040648a41998acee9b68de7d1ad8bad0124397a640.exe
"C:\Users\Admin\AppData\Local\Temp\cebbc87b1bc54ce6690ede040648a41998acee9b68de7d1ad8bad0124397a640.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1668
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1668 -s 872
  2⤵
  - Program crash
  PID:1980

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1668 -ip 1668
1⤵
PID:4216

memory/1668-132-0x0000000000590000-0x0000000000595000-memory.dmp

Filesize
20KB

Download
memory/1668-133-0x0000000000400000-0x00000000004CA000-memory.dmp

Filesize
808KB

Download