45aa770222a6fba876c9e3f1d5c524c44eaaa59ae9fb5f6ff1363386fee34588

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
11-01-2024 05:50

Target

52b41adfd73301b34285bfa97cbd0847.exe
Size

124KB
MD5

52b41adfd73301b34285bfa97cbd0847
SHA1

998833acf2e293c34c4ed703eabf44fd5036e4df
SHA256

45aa770222a6fba876c9e3f1d5c524c44eaaa59ae9fb5f6ff1363386fee34588
SHA512

b9e287de6aefcf048653783ee8e2a66de9f9192eed022e5fc58afa2604a6c3113349c4e42f853230e15b2826f3a0b9ed66e04856f625eb889edcb189f19cb83e
SSDEEP

1536:NytkjyTQ0wU0GgAJa0P1kNmKldCMhdu8KWP/nTn8nBP9VewNeG0h/l:6kjxdU0GgAT98t

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2908	2240	WerFault.exe	15

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2240	52b41adfd73301b34285bfa97cbd0847.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2240 wrote to memory of 2908	2240	52b41adfd73301b34285bfa97cbd0847.exe	18
PID 2240 wrote to memory of 2908	2240	52b41adfd73301b34285bfa97cbd0847.exe	18
PID 2240 wrote to memory of 2908	2240	52b41adfd73301b34285bfa97cbd0847.exe	18
PID 2240 wrote to memory of 2908	2240	52b41adfd73301b34285bfa97cbd0847.exe	18

C:\Users\Admin\AppData\Local\Temp\52b41adfd73301b34285bfa97cbd0847.exe
"C:\Users\Admin\AppData\Local\Temp\52b41adfd73301b34285bfa97cbd0847.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2240
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2240 -s 188
  2⤵
  - Program crash
  PID:2908