4ba701fbcf36b3b10bf695b91088ce3b33eab1b2271f1c91c5cc6480be4cd8ad

Analysis

max time kernel
110s
max time network
113s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
22/07/2024, 13:45

Target
ba0aac6965e79a370db6533976885bc0N.exe
Size 1.9MB
Sample240722-q2khbszfmb
SHA256 4ba701fbcf36b3b10bf695b91088ce3b33eab1b2271f1c91c5cc6480be4cd8ad
MD5 ba0aac6965e79a370db6533976885bc0
SHA1 e4d4e9bf02d6b1d84106776bad37dad75eb0310f
SHA512 028b3fc71e5fceafdb173f06e8c478fd4d922d23ecb9d81dea0e42124ba4ef03053993829339290e7f29bd35457b48b988f4ee5043c5d212db80277d4cf82509
SSDEEP 24576:qMyptg5dkAmL8jyLQLNW0yzotcSHVZwMz8gkyJ8fP4lw46lw4Pz9ELqjL4:3te3ow4+w4PzqLcL4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2436	2860	WerFault.exe	83

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2860	ba0aac6965e79a370db6533976885bc0N.exe

C:\Users\Admin\AppData\Local\Temp\ba0aac6965e79a370db6533976885bc0N.exe
"C:\Users\Admin\AppData\Local\Temp\ba0aac6965e79a370db6533976885bc0N.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2860
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2860 -s 468
  2⤵
  - Program crash
  PID:2436

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 2860 -ip 2860
1⤵
PID:3676

memory/2860-0-0x0000000000400000-0x000000000054B000-memory.dmp

Download

memory/2860-4-0x0000000002340000-0x0000000002341000-memory.dmp

Download

memory/2860-3-0x0000000002310000-0x0000000002311000-memory.dmp

Download