50f78f40dfaad3efdd0209338df6bd301629cc990657a89911dac2a36e6b3373

Analysis

max time kernel
146s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25-12-2023 13:54

Target

2363216eef39c5afa0519f99de711ce7.exe
Size

160KB
MD5

2363216eef39c5afa0519f99de711ce7
SHA1

a3e71bf53041d650fb35163bba3ab3cbaec1f88f
SHA256

50f78f40dfaad3efdd0209338df6bd301629cc990657a89911dac2a36e6b3373
SHA512

1662bcfb368a9d2a6780661c1bc8ef56a6ef47821702e35e218f78440c1ad684874cdbcb91f5828180d06141d868590597dc7f8529fd4f727bd5a2888aa2c096
SSDEEP

3072:Bh7xJptfKqOdBsebgeDyJiqmdoTtawZPotUPvPDspYxjatL0JiTeDXokR49M6evG:v7DptfKRLsebgeDyJtmdo7PIWDspYJa5

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3564	4832	WerFault.exe	42

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4832	2363216eef39c5afa0519f99de711ce7.exe

C:\Users\Admin\AppData\Local\Temp\2363216eef39c5afa0519f99de711ce7.exe
"C:\Users\Admin\AppData\Local\Temp\2363216eef39c5afa0519f99de711ce7.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4832
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4832 -s 468
  2⤵
  - Program crash
  PID:3564

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4832 -ip 4832
1⤵
PID:5000