Analysis
-
max time kernel
96s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
02-05-2022 03:43
Static task
static1
Behavioral task
behavioral1
Sample
9d455a303a7e616dd2a20a9f3ff2b406862c24701977e35fe87cb5e061dbb23a.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
9d455a303a7e616dd2a20a9f3ff2b406862c24701977e35fe87cb5e061dbb23a.exe
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
General
-
Target
9d455a303a7e616dd2a20a9f3ff2b406862c24701977e35fe87cb5e061dbb23a.exe
-
Size
1.5MB
-
MD5
01f1ae0432dc9cef9393df121d512502
-
SHA1
b1ee440d433494c89ca3a6cb6a4326f02af6c734
-
SHA256
9d455a303a7e616dd2a20a9f3ff2b406862c24701977e35fe87cb5e061dbb23a
-
SHA512
8670a8fd8b0ea6468bf34bdbe9da07d5b5036f2530fb74ab447c4277caf2b1feb086a076f92749f5fad36d2b76991bd6de2f541d75dbddc0492ff656fbeeaeeb
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4168 2188 WerFault.exe 9d455a303a7e616dd2a20a9f3ff2b406862c24701977e35fe87cb5e061dbb23a.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
9d455a303a7e616dd2a20a9f3ff2b406862c24701977e35fe87cb5e061dbb23a.exepid process 2188 9d455a303a7e616dd2a20a9f3ff2b406862c24701977e35fe87cb5e061dbb23a.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\9d455a303a7e616dd2a20a9f3ff2b406862c24701977e35fe87cb5e061dbb23a.exe"C:\Users\Admin\AppData\Local\Temp\9d455a303a7e616dd2a20a9f3ff2b406862c24701977e35fe87cb5e061dbb23a.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2188 -s 4682⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2188 -ip 21881⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2188-130-0x0000000000400000-0x000000000054B000-memory.dmpFilesize
1.3MB
-
memory/2188-133-0x0000000000401000-0x0000000000546000-memory.dmpFilesize
1.3MB
-
memory/2188-134-0x0000000000401000-0x0000000000546000-memory.dmpFilesize
1.3MB
-
memory/2188-136-0x0000000000401000-0x0000000000546000-memory.dmpFilesize
1.3MB
-
memory/2188-138-0x0000000000401000-0x0000000000546000-memory.dmpFilesize
1.3MB
-
memory/2188-137-0x0000000000401000-0x0000000000546000-memory.dmpFilesize
1.3MB
-
memory/2188-139-0x0000000000401000-0x0000000000546000-memory.dmpFilesize
1.3MB
-
memory/2188-140-0x0000000000401000-0x0000000000546000-memory.dmpFilesize
1.3MB