6e7c886eb625368edd3ad86f04172a052ae2ff4203c63ea5335442a908773083

Analysis

max time kernel
140s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
07-08-2023 21:39

Target

6e7c886eb625368edd3ad86f04172a052ae2ff4203c63ea5335442a908773083.exe
Size

1.5MB
MD5

b1c86cfae09726d0446218b5c2321c9e
SHA1

c0138889708aaa6f8a24a2976d7b1922432d0e39
SHA256

6e7c886eb625368edd3ad86f04172a052ae2ff4203c63ea5335442a908773083
SHA512

cace13bce4c0cbc5cbc751f8163968322167c3bf513059af485b4310216a76f789b4896ee91aa3891991225d5807b2a4a1e76307b904b077b7bf14783b461f51
SSDEEP

12288:Ht/fq0gtJEGPC+kJuZMs7t26mmcw7nC4Eg04IzZL2a6wBywGPOxqP9xqe7K3S3RG:Hp3gPC+kMZ/7Mdmb76kPOxqP9ci3RHm

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2864	1548	WerFault.exe	80

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1548	6e7c886eb625368edd3ad86f04172a052ae2ff4203c63ea5335442a908773083.exe
1548	6e7c886eb625368edd3ad86f04172a052ae2ff4203c63ea5335442a908773083.exe

C:\Users\Admin\AppData\Local\Temp\6e7c886eb625368edd3ad86f04172a052ae2ff4203c63ea5335442a908773083.exe
"C:\Users\Admin\AppData\Local\Temp\6e7c886eb625368edd3ad86f04172a052ae2ff4203c63ea5335442a908773083.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1548
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1548 -s 768
  2⤵
  - Program crash
  PID:2864

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 1548 -ip 1548
1⤵
PID:1200