58cb9f2d93da85c2e8000a995c14de471c0fc1d01def201345f4feec1d585ade

Analysis

max time kernel
141s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
18/01/2024, 23:32

Target

66527a021d2595bc3b815a8b8c7aa855.exe
Size

96KB
MD5

66527a021d2595bc3b815a8b8c7aa855
SHA1

561757b4188c707c9bad0f50191c1b6e2f833cee
SHA256

58cb9f2d93da85c2e8000a995c14de471c0fc1d01def201345f4feec1d585ade
SHA512

88b55afb4649d9abc62dac9b43f453d2314a3965e8c9bdf314c47a2c70ef949483e6e00802dd1da668b4992aa68fde4780fed10c9c5c868c94bf9ca6789117d7
SSDEEP

1536:jgQBHgf6cO/h+kGulSc16l6u+NMMl/KlYv1Tq5ThFgNIjnZuc:PrhLlu8CFFgCnQc

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2388	5012	WerFault.exe	84

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5012	66527a021d2595bc3b815a8b8c7aa855.exe

C:\Users\Admin\AppData\Local\Temp\66527a021d2595bc3b815a8b8c7aa855.exe
"C:\Users\Admin\AppData\Local\Temp\66527a021d2595bc3b815a8b8c7aa855.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5012
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5012 -s 464
  2⤵
  - Program crash
  PID:2388

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 5012 -ip 5012
1⤵
PID:3612