7843e450ea287d4153dcdaa4a83d522ae3c49d6bfdfb0b217d4566bddff5e070

Analysis

max time kernel
133s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
16-02-2023 20:47

Target

7843e450ea287d4153dcdaa4a83d522ae3c49d6bfdfb0b217d4566bddff5e070.exe
Size

1.7MB
MD5

08f7d396a29a7eaddc5b18ac9397690a
SHA1

df67eabec0e97eec11dcb3cee8d351171c7abe54
SHA256

7843e450ea287d4153dcdaa4a83d522ae3c49d6bfdfb0b217d4566bddff5e070
SHA512

623480e43eea993c2f99f1735b842af56d1bf144d19bfa44d090f9f76c0c1a4295791a15c992e01c211fb8a3d843191b5b05aa1acf3d8336614b672cd77ddfad
SSDEEP

49152:8/J/81Pmao2uung2TbxpBMkbTNF6nHOYQ:8/Z81Oao2uunxTbbBMGD6S

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1328 1476 WerFault.exe 7843e450ea287d4153dcdaa4a83d522ae3c49d6bfdfb0b217d4566bddff5e070.exe

pid	pid_target	process	target process
1328	1476	WerFault.exe	7843e450ea287d4153dcdaa4a83d522ae3c49d6bfdfb0b217d4566bddff5e070.exe

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

7843e450ea287d4153dcdaa4a83d522ae3c49d6bfdfb0b217d4566bddff5e070.exe

pid	process
1476	7843e450ea287d4153dcdaa4a83d522ae3c49d6bfdfb0b217d4566bddff5e070.exe
1476	7843e450ea287d4153dcdaa4a83d522ae3c49d6bfdfb0b217d4566bddff5e070.exe

C:\Users\Admin\AppData\Local\Temp\7843e450ea287d4153dcdaa4a83d522ae3c49d6bfdfb0b217d4566bddff5e070.exe
"C:\Users\Admin\AppData\Local\Temp\7843e450ea287d4153dcdaa4a83d522ae3c49d6bfdfb0b217d4566bddff5e070.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1476

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1476 -s 1076
2⤵
- Program crash
PID:1328

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 1476 -ip 1476
1⤵
PID:2936

memory/1476-132-0x0000000000400000-0x000000000078E000-memory.dmp

Filesize
3.6MB

Download
memory/1476-133-0x0000000000400000-0x000000000078E000-memory.dmp

Filesize
3.6MB

Download
memory/1476-134-0x0000000000400000-0x000000000078E000-memory.dmp

Filesize
3.6MB

Download
memory/1476-135-0x0000000000400000-0x000000000078E000-memory.dmp

Filesize
3.6MB

Download
memory/1476-136-0x0000000000400000-0x000000000078E000-memory.dmp

Filesize
3.6MB

Download
memory/1476-137-0x0000000000400000-0x000000000078E000-memory.dmp

Filesize
3.6MB

Download