1bbf7521bd43cc4fd418b052fe950ab71b66e7dbef9b0d4816939a5019aecaaa | Triage

Analysis

max time kernel
139s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
02-09-2022 06:24

Sharing

Report Analysis Logs

General

Target

iprigk.exe
Size

4.3MB
MD5

0f436d1b40cc8da71989b597951ae61c
SHA1

eb697a163bf73ee475c93e916bfaf90de40dd422
SHA256

1bbf7521bd43cc4fd418b052fe950ab71b66e7dbef9b0d4816939a5019aecaaa
SHA512

489c4b07fbf28921d22adfe6429e56fb70b8503ad9cde21991923bc54ee5ec78675c94185773bbabc166221b731f1e9335f59ce92113769e9d0f4becc800516e
SSDEEP

98304:tmlSoZ5WrocGLpYHgyRWSJfSD8xipKbgo9PIs4qSoNMLmUzv:IlR5jcG+AyRWSJNceeLlT

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2112 2188 WerFault.exe iprigk.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

iprigk.exe

pid process

2188 iprigk.exe

C:\Users\Admin\AppData\Local\Temp\iprigk.exe
"C:\Users\Admin\AppData\Local\Temp\iprigk.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2188

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2188 -s 1820
2⤵
- Program crash
PID:2112

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2188 -ip 2188
1⤵
PID:612

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...