8a073c6dafa115cacce807b5c6574b2feddae99a1ee1018c6a2659542dd79fa0

Analysis

max time kernel
139s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20231023-en
resource tags

arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
submitted
25/11/2023, 19:10

Target

8a073c6dafa115cacce807b5c6574b2feddae99a1ee1018c6a2659542dd79fa0.exe
Size

2.3MB
MD5

748270d5524a0f9f97b30877ad35cd3e
SHA1

b713c4c9f73d58d368d81235cca49ebfbfdb2152
SHA256

8a073c6dafa115cacce807b5c6574b2feddae99a1ee1018c6a2659542dd79fa0
SHA512

9c28470b8911bfe02bd5c3e566d2d3cc79d90fa0e1e06025066b6d3dbbbe240a89289438b551054163169de0fb5f5c417786a7259e7143fce273394458695fbb
SSDEEP

49152:oyN4xSF4HYpkLPzjtNVpACuj0MMfArnWE1Lv/U/LZxF:oQ2SF4HYpkLLjbATqA9CLZ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2044	2804	WerFault.exe	82

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2804	8a073c6dafa115cacce807b5c6574b2feddae99a1ee1018c6a2659542dd79fa0.exe
2804	8a073c6dafa115cacce807b5c6574b2feddae99a1ee1018c6a2659542dd79fa0.exe

C:\Users\Admin\AppData\Local\Temp\8a073c6dafa115cacce807b5c6574b2feddae99a1ee1018c6a2659542dd79fa0.exe
"C:\Users\Admin\AppData\Local\Temp\8a073c6dafa115cacce807b5c6574b2feddae99a1ee1018c6a2659542dd79fa0.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2804
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2804 -s 616
  2⤵
  - Program crash
  PID:2044

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2804 -ip 2804
1⤵
PID:3636