f90b21608275e37c6640b8bcc087b208164b5020b2977491737c8b0ff8cbc54a

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 04:28

Target

28278727e342d6087268764b557f45c6.exe
Size

20KB
MD5

28278727e342d6087268764b557f45c6
SHA1

05e71b76fb33ce65248ad1809dfb9c6fff63f064
SHA256

f90b21608275e37c6640b8bcc087b208164b5020b2977491737c8b0ff8cbc54a
SHA512

2ff7bf4052154796827c916ec0d22b2cdb51daddc3f38eeb7b4e801176e50dc95f5cec3b987610fde1efe2a01175c5faf13aedd6fd251dcd9a8eb4f1c14f9630
SSDEEP

96:M61z+GLWejfvGZ7R03oCs2Qj4PewMfGjmDsFbinX333UnnZgfuWS6mKqoEZh:NWIf+A4JKGf5DsRinH33UZdWVen

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2212	2132	WerFault.exe	14

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2132	28278727e342d6087268764b557f45c6.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2132 wrote to memory of 2212	2132	28278727e342d6087268764b557f45c6.exe	16
PID 2132 wrote to memory of 2212	2132	28278727e342d6087268764b557f45c6.exe	16
PID 2132 wrote to memory of 2212	2132	28278727e342d6087268764b557f45c6.exe	16
PID 2132 wrote to memory of 2212	2132	28278727e342d6087268764b557f45c6.exe	16
PID 2132 wrote to memory of 2212	2132	28278727e342d6087268764b557f45c6.exe	16
PID 2132 wrote to memory of 2212	2132	28278727e342d6087268764b557f45c6.exe	16
PID 2132 wrote to memory of 2212	2132	28278727e342d6087268764b557f45c6.exe	16

C:\Users\Admin\AppData\Local\Temp\28278727e342d6087268764b557f45c6.exe
"C:\Users\Admin\AppData\Local\Temp\28278727e342d6087268764b557f45c6.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2132
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2132 -s 312
  2⤵
  - Program crash
  PID:2212