8bd4eea0b0b25ada45b33ea1bfe5d9858ac70667baa8b2f191c892145ed4b338

Analysis

max time kernel
150s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
28-12-2023 23:25

Target

ffbddf87a465935f5701219a87d854c6.exe
Size

288KB
MD5

ffbddf87a465935f5701219a87d854c6
SHA1

3560d29fe379e15c87a82eb2b2150469722c4c03
SHA256

8bd4eea0b0b25ada45b33ea1bfe5d9858ac70667baa8b2f191c892145ed4b338
SHA512

9a34e93227cbefa5b97882a34d8e287cf268ef5abdcd4056e87900c08352211a3529b207f6174bc65a87a94eed788a91e7ce565c867fe183131a00fdbea4d585
SSDEEP

6144:91pQc0f7XP+g3AGJpWVzuwmI8nQOsPVKnvmb7/D26Mbj/R8SUHAgOTTMEtBTTlmg:h27/XvLWpuXnQOsPVKnvmb7/D26MHUH+

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
388	1864	WerFault.exe	87

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1864	ffbddf87a465935f5701219a87d854c6.exe

C:\Users\Admin\AppData\Local\Temp\ffbddf87a465935f5701219a87d854c6.exe
"C:\Users\Admin\AppData\Local\Temp\ffbddf87a465935f5701219a87d854c6.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1864
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1864 -s 452
  2⤵
  - Program crash
  PID:388

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1864 -ip 1864
1⤵
PID:2752