d0a87503e2f6d7f2c465777b044fd363b26accc391034d84eb85d0c49c61e56e

Analysis

max time kernel
143s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
07-10-2023 04:00

Target

d0a87503e2f6d7f2c465777b044fd363b26accc391034d84eb85d0c49c61e56e.exe
Size

928KB
MD5

6ad5ed4e03abbf0657c9efd46ea3ea6f
SHA1

4ebda8f10fd659cee0289d4d3c8d1ce4cd06f792
SHA256

d0a87503e2f6d7f2c465777b044fd363b26accc391034d84eb85d0c49c61e56e
SHA512

ecf79339d2092aa3d97e94a27b43d59e9cacc581803b4ae005d17d1a27768a9fa28536aa4d95be8fb7b85cd1d13208ffcf01caa0a41e76d336c7b4eba3985007
SSDEEP

24576:DQX/6RfIsHYuLSGgTm3YnrSEbNvrLW7wUZulV7:DQXCRNYuLSi7wculh

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
528	1188	WerFault.exe	84

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1188	d0a87503e2f6d7f2c465777b044fd363b26accc391034d84eb85d0c49c61e56e.exe
1188	d0a87503e2f6d7f2c465777b044fd363b26accc391034d84eb85d0c49c61e56e.exe

C:\Users\Admin\AppData\Local\Temp\d0a87503e2f6d7f2c465777b044fd363b26accc391034d84eb85d0c49c61e56e.exe
"C:\Users\Admin\AppData\Local\Temp\d0a87503e2f6d7f2c465777b044fd363b26accc391034d84eb85d0c49c61e56e.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1188
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1188 -s 848
  2⤵
  - Program crash
  PID:528

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 1188 -ip 1188
1⤵
PID:4040