6b98bce17581ab4c5dfaed3836209b8d8eeb7399b031918141019453d144d215

Analysis

max time kernel
147s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
09/01/2024, 16:10

Target

4ec32b621a511accc34a718e3df6b3d5.exe
Size

304KB
MD5

4ec32b621a511accc34a718e3df6b3d5
SHA1

008d8ee3cb1ca75fffbab65f17c15ed9f843ba2c
SHA256

6b98bce17581ab4c5dfaed3836209b8d8eeb7399b031918141019453d144d215
SHA512

92992e29b2ab051b5eb2cc92264bcba0d117e404d93f5b154612964b64adf5b8f903c38175007e696baafc71f325723066f45f848f30393edca06f21abf2ae6e
SSDEEP

3072:ZIDNcIFN3tw4QfwmAOMe6UJbVM/vkA9OQzY6eCFs5Juh2v19hlDcfbEdp7uxEo+i:qJigOTJXYOaFs5Juh819hqkuGh2LeyI

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4756	4996	WerFault.exe	16

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4996	4ec32b621a511accc34a718e3df6b3d5.exe

C:\Users\Admin\AppData\Local\Temp\4ec32b621a511accc34a718e3df6b3d5.exe
"C:\Users\Admin\AppData\Local\Temp\4ec32b621a511accc34a718e3df6b3d5.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4996
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4996 -s 468
  2⤵
  - Program crash
  PID:4756

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4996 -ip 4996
1⤵
PID:3296

memory/4996-2-0x0000000002210000-0x0000000002211000-memory.dmp

Filesize
4KB

Download
memory/4996-3-0x0000000002230000-0x0000000002231000-memory.dmp

Filesize
4KB

Download