b317480c8704e3e2ae8a79e80482c6a186552630a77a1ac1c4b33e4e3dd2d964

Analysis

max time kernel
376s
max time network
452s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
03/12/2022, 15:00

Target

b317480c8704e3e2ae8a79e80482c6a186552630a77a1ac1c4b33e4e3dd2d964.exe
Size

444KB
MD5

d8b3f83e358633bc33c9e2cbe92b2c57
SHA1

37902ab95e14ef64a1756a75cdb3299431f478fa
SHA256

b317480c8704e3e2ae8a79e80482c6a186552630a77a1ac1c4b33e4e3dd2d964
SHA512

a5e6648feaea73b3deb4604652d461b16b041c43a779ee3dcd4dc3d2703690f86c8bde62993ed7835ed3fed486fdd10574371e32c5d3c741f7e9f6403f2b4b23
SSDEEP

12288:tmriQK9wb+Ha02MBU8Vezlmi3lHbuad+sp/p5tzY:sriQo6Oh2F8qlmi9bxdrpBD

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4300	4776	WerFault.exe	78

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4776	b317480c8704e3e2ae8a79e80482c6a186552630a77a1ac1c4b33e4e3dd2d964.exe

C:\Users\Admin\AppData\Local\Temp\b317480c8704e3e2ae8a79e80482c6a186552630a77a1ac1c4b33e4e3dd2d964.exe
"C:\Users\Admin\AppData\Local\Temp\b317480c8704e3e2ae8a79e80482c6a186552630a77a1ac1c4b33e4e3dd2d964.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4776
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4776 -s 892
  2⤵
  - Program crash
  PID:4300

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4776 -ip 4776
1⤵
PID:1452

memory/4776-132-0x0000000002120000-0x0000000002126000-memory.dmp

Filesize
24KB

Download
memory/4776-133-0x0000000000400000-0x00000000004CD000-memory.dmp

Filesize
820KB

Download