f90b21608275e37c6640b8bcc087b208164b5020b2977491737c8b0ff8cbc54a

Analysis

max time kernel
184s
max time network
201s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
31/12/2023, 04:28

Target

28278727e342d6087268764b557f45c6.exe
Size

20KB
MD5

28278727e342d6087268764b557f45c6
SHA1

05e71b76fb33ce65248ad1809dfb9c6fff63f064
SHA256

f90b21608275e37c6640b8bcc087b208164b5020b2977491737c8b0ff8cbc54a
SHA512

2ff7bf4052154796827c916ec0d22b2cdb51daddc3f38eeb7b4e801176e50dc95f5cec3b987610fde1efe2a01175c5faf13aedd6fd251dcd9a8eb4f1c14f9630
SSDEEP

96:M61z+GLWejfvGZ7R03oCs2Qj4PewMfGjmDsFbinX333UnnZgfuWS6mKqoEZh:NWIf+A4JKGf5DsRinH33UZdWVen

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
868	1572	WerFault.exe	87

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1572	28278727e342d6087268764b557f45c6.exe

C:\Users\Admin\AppData\Local\Temp\28278727e342d6087268764b557f45c6.exe
"C:\Users\Admin\AppData\Local\Temp\28278727e342d6087268764b557f45c6.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1572
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1572 -s 464
  2⤵
  - Program crash
  PID:868

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 1572 -ip 1572
1⤵
PID:3092