140d0fe24dc7ea058cc597780cc0afcae57208fc01b67d71a6d421f08120ebb7

Analysis

max time kernel
143s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
11/01/2024, 11:50

Target

53707fc33c89b7240980d9a8f3a3f9c6.exe
Size

160KB
MD5

53707fc33c89b7240980d9a8f3a3f9c6
SHA1

d8e5fd9be588cc171fb24a595914f107f85c99fd
SHA256

140d0fe24dc7ea058cc597780cc0afcae57208fc01b67d71a6d421f08120ebb7
SHA512

c4cba7c4cb90990110c1c62f415ed87e00d11123b416de92f3c9fade69faca197eac44f25f1685ef36e520a25ecb976d53b04769d7d5498ef0d6b07155af907b
SSDEEP

3072:bGzsrBioe5g+GwJs8K9YUoIrJaRuSZ/JlQPj/PYv2wM0B2vmkHgHAGFAhT4oQZiP:bGwrjP9YErMRuSZ/JlQLHYv2PvzGAMAZ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2404	3804	WerFault.exe	88

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3804	53707fc33c89b7240980d9a8f3a3f9c6.exe

C:\Users\Admin\AppData\Local\Temp\53707fc33c89b7240980d9a8f3a3f9c6.exe
"C:\Users\Admin\AppData\Local\Temp\53707fc33c89b7240980d9a8f3a3f9c6.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3804
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3804 -s 464
  2⤵
  - Program crash
  PID:2404

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3804 -ip 3804
1⤵
PID:4884