1389cae185b6c2c4df8243b246e4e5b8dc5db174b0b6815784b0f717f11ff4ac

Analysis

max time kernel
141s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
15/08/2023, 11:28

Target

1389cae185b6c2c4df8243b246e4e5b8dc5db174b0b6815784b0f717f11ff4ac.exe
Size

15.0MB
MD5

db398cb9bb5622630b8ebcaf866ba1e6
SHA1

d7d140cba366129931c7b42bb273bca9fc9500ba
SHA256

1389cae185b6c2c4df8243b246e4e5b8dc5db174b0b6815784b0f717f11ff4ac
SHA512

72ef8d2958999cc9bad34efbb6696290235aebabe2bdefd75ad88f722140788c8bcf00c72363404f7e524811160b6551d72e4ce260161ddb8f0db9dcbda9c1d6
SSDEEP

393216:BqFkR53J6r2Z2Z4S9+tjIlVPb8eDNkuuF:E63J42Z2Z4hjwVPbF+u

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
796	3812	WerFault.exe	79

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3812	1389cae185b6c2c4df8243b246e4e5b8dc5db174b0b6815784b0f717f11ff4ac.exe
3812	1389cae185b6c2c4df8243b246e4e5b8dc5db174b0b6815784b0f717f11ff4ac.exe

C:\Users\Admin\AppData\Local\Temp\1389cae185b6c2c4df8243b246e4e5b8dc5db174b0b6815784b0f717f11ff4ac.exe
"C:\Users\Admin\AppData\Local\Temp\1389cae185b6c2c4df8243b246e4e5b8dc5db174b0b6815784b0f717f11ff4ac.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3812
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 3812 -s 504
  2⤵
  - Program crash
  PID:796

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 3812 -ip 3812
1⤵
PID:1108