Analysis

  • max time kernel
    140s
  • max time network
    161s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-10-2022 07:12

General

  • Target

    38a7576bced9cffd945a3d7eb911c442f2a1d0ca8b20423ead654d1df60b735f.exe

  • Size

    84KB

  • MD5

    636f122fbffdb562e98b4a798287d8b0

  • SHA1

    2034346b6069ac862fb40283c0e0d37e45e184f8

  • SHA256

    38a7576bced9cffd945a3d7eb911c442f2a1d0ca8b20423ead654d1df60b735f

  • SHA512

    1c096955f66c9353b4730cb65728120b07376090e4110bd71cbe4acb1e1bfd8b28cb2904090a99d9259fed4bd8ee699bb8f41b5ba567b99bf4bc8c302a1a242d

  • SSDEEP

    768:D7yGWJq7dPhzjr8QkB7ElSUEpQzcNXjPP6Jht0C0O30U0DCSPsZMaeW80vh8hJI4:3yGWJKjOQaXDibtzfjwCSPsZMauu3o

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\38a7576bced9cffd945a3d7eb911c442f2a1d0ca8b20423ead654d1df60b735f.exe
    "C:\Users\Admin\AppData\Local\Temp\38a7576bced9cffd945a3d7eb911c442f2a1d0ca8b20423ead654d1df60b735f.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1456
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 1456 -s 664
      2⤵
      • Program crash
      PID:972
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1456 -ip 1456
    1⤵
      PID:3808

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads