bde4054f043de07d7c8ed0e888a159d0e7bae70cd49bc414a69098b8e1a36ccd

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
11/01/2024, 18:12

Target
5439486d441f4e2b4871d1cc3d445dac.exe
Size 184KB
Sample240111-wtlcjsede7
SHA256 bde4054f043de07d7c8ed0e888a159d0e7bae70cd49bc414a69098b8e1a36ccd
MD5 5439486d441f4e2b4871d1cc3d445dac
SHA1 040cbc83fdec954806a6fce75132aa9b1137b9e6
SHA512 6781531e10aa3ddc89e8d4d80e99109bdb644ed0a6177fa78c594ac11bfef83b7d70a60fe20a53fbdd4743764a6e85d085822af85bb6b856175c521965cb88ec
SSDEEP 3072:JeGi5L/10zLCG8jCM+0ZdycAYtJxMFvj/ZO1x2Ql8XklP6pFh:JeT5SPCGrMJdycuTtxklP6pF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
3736	2320	WerFault.exe	46
3800	2320	WerFault.exe	46

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2320	5439486d441f4e2b4871d1cc3d445dac.exe

C:\Users\Admin\AppData\Local\Temp\5439486d441f4e2b4871d1cc3d445dac.exe
"C:\Users\Admin\AppData\Local\Temp\5439486d441f4e2b4871d1cc3d445dac.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2320
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2320 -s 720
  2⤵
  - Program crash
  PID:3736
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2320 -s 720
  2⤵
  - Program crash
  PID:3800

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 2320 -ip 2320
1⤵
PID:460

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 2320 -ip 2320
1⤵
PID:4880