Analysis

  • max time kernel
    154s
  • max time network
    181s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/10/2022, 02:41

General

  • Target

    81d45690bdbea2b6c2b35878903e6ceaed8bf002a157c27d7b647c18a9e5d006.exe

  • Size

    728KB

  • MD5

    47a3a38c613fc7fe50379423838f42a0

  • SHA1

    baf35bd9625bec201df56e0859f6205f55fe480b

  • SHA256

    81d45690bdbea2b6c2b35878903e6ceaed8bf002a157c27d7b647c18a9e5d006

  • SHA512

    4efbfceaf33d19596173b0ec9ae2c8e5894182edf0366b4aa543cda9b4a957a4d36be897626668fbd2256f8f17045a355bb5067dfdd3297946ef53034798051f

  • SSDEEP

    12288:7iLERtSJj3culKz/LXzqCFeJ8eAQlfmO8hzrFsaCT6xwb2T99X//Mbt:71ij3cJzTXz/Ub8NYmxxTnX

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\81d45690bdbea2b6c2b35878903e6ceaed8bf002a157c27d7b647c18a9e5d006.exe
    "C:\Users\Admin\AppData\Local\Temp\81d45690bdbea2b6c2b35878903e6ceaed8bf002a157c27d7b647c18a9e5d006.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:392
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 392 -s 476
      2⤵
      • Program crash
      PID:1564
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 392 -ip 392
    1⤵
      PID:4936

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads