4d178e10389731a660d8dc1240f6d64723aae55ad953150bed2520d2c39e6644

Analysis

max time kernel
135s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
18/06/2023, 07:32

Target

HEUR-Trojan.Win32.Generic-4d178e10389731a660d.exe
Size

183KB
MD5

d677c626953c9ba17b3d094a83b1048e
SHA1

bf78af289038b4c088b7679a3d08627dac4883bd
SHA256

4d178e10389731a660d8dc1240f6d64723aae55ad953150bed2520d2c39e6644
SHA512

a6089df6a109ce91644e338b98ee9de96fa1a13040315e05ccac4afd362233cbbb8057cf5bb66de606c9231059d5bde29ab6cd92fb811bf086057a311fc60418
SSDEEP

1536:XgzTtxCCkI7Yq0GzAc4xYEwbJbSDzlkW3zzxV/A8:QzTeLuzAGbJUGWv/A8

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
3228	1340	WerFault.exe	81
1632	1340	WerFault.exe	81

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1340	HEUR-Trojan.Win32.Generic-4d178e10389731a660d.exe
1340	HEUR-Trojan.Win32.Generic-4d178e10389731a660d.exe

C:\Users\Admin\AppData\Local\Temp\HEUR-Trojan.Win32.Generic-4d178e10389731a660d.exe
"C:\Users\Admin\AppData\Local\Temp\HEUR-Trojan.Win32.Generic-4d178e10389731a660d.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1340
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1340 -s 1220
  2⤵
  - Program crash
  PID:3228
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1340 -s 1220
  2⤵
  - Program crash
  PID:1632

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 360 -p 1340 -ip 1340
1⤵
PID:5088

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 516 -p 1340 -ip 1340
1⤵
PID:2856

memory/1340-133-0x0000000000730000-0x0000000000764000-memory.dmp

Filesize
208KB

Download
memory/1340-134-0x000000001B690000-0x000000001B6A0000-memory.dmp

Filesize
64KB

Download
memory/1340-135-0x000000001B6A0000-0x000000001BDF7000-memory.dmp

Filesize
7.3MB

Download