20a319675d7eecd19b38896b8af0b200ac5383ddfcda02b36503a98a2df4d7ca

Analysis

max time kernel
147s
max time network
182s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30-12-2023 02:38

Target

0beb86a027950cbacf7bc41e2c03fd34.exe
Size

232KB
MD5

0beb86a027950cbacf7bc41e2c03fd34
SHA1

7383ab7e7bf39ebf47bd7e96c8d4d011d6ec9895
SHA256

20a319675d7eecd19b38896b8af0b200ac5383ddfcda02b36503a98a2df4d7ca
SHA512

87d94169cc004148255973db34beb06de390486f95cc11d3f798d8934f6e2ff2f3560e9500135dc667114a7ace654471cb8b7125acfd81ae787dc1365debcb33
SSDEEP

1536:Z7+8G2zxAWT6TmjX88zHUft9qVxAWi6x2QzLU4BFdZhzPQ2C1CvGQJbsE5pUDwij:Zy1QF2QzBLdUp1CzjoOG9+6WYVTiPM

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1320	4140	WerFault.exe	90

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4140	0beb86a027950cbacf7bc41e2c03fd34.exe

C:\Users\Admin\AppData\Local\Temp\0beb86a027950cbacf7bc41e2c03fd34.exe
"C:\Users\Admin\AppData\Local\Temp\0beb86a027950cbacf7bc41e2c03fd34.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4140
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4140 -s 476
  2⤵
  - Program crash
  PID:1320

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4140 -ip 4140
1⤵
PID:3992

memory/4140-3-0x0000000002240000-0x0000000002241000-memory.dmp

Filesize
4KB

Download
memory/4140-2-0x00000000021F0000-0x00000000021F1000-memory.dmp

Filesize
4KB

Download