98d07c7e5948f055ee8fa52683aa9964c135ca6d22d310dc95ec8bc7e1172528

Analysis

max time kernel
160s
max time network
188s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
04/12/2022, 06:25

Target

98d07c7e5948f055ee8fa52683aa9964c135ca6d22d310dc95ec8bc7e1172528.exe
Size

28KB
MD5

cb0e725dc7cc6f2a826ef5745e511703
SHA1

a07c4a2f99572669e88e9213dc57ae6bf0e35aee
SHA256

98d07c7e5948f055ee8fa52683aa9964c135ca6d22d310dc95ec8bc7e1172528
SHA512

718dd8d7d03acdc22537653d3335910f7ae91b213847e55f3538699e0d2cee2540eb8d7557d65f85f29b308c4f7b9732e9032f73f115f1c4a863c039516c3873
SSDEEP

384:wP1iOUNLCkDUBRviJtPbY12guy1l9OAl4/REnBDE04n3e:w9i+kDUjGUhJMUMEAu

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2128	2228	WerFault.exe	77

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2228	98d07c7e5948f055ee8fa52683aa9964c135ca6d22d310dc95ec8bc7e1172528.exe

C:\Users\Admin\AppData\Local\Temp\98d07c7e5948f055ee8fa52683aa9964c135ca6d22d310dc95ec8bc7e1172528.exe
"C:\Users\Admin\AppData\Local\Temp\98d07c7e5948f055ee8fa52683aa9964c135ca6d22d310dc95ec8bc7e1172528.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2228
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2228 -s 488
  2⤵
  - Program crash
  PID:2128

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 2228 -ip 2228
1⤵
PID:4508

memory/2228-134-0x0000000000400000-0x0000000000407000-memory.dmp

Filesize
28KB

Download