Analysis
-
max time kernel
153s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
11/10/2022, 08:08
General
-
Target
2a59dbf7629f6deedf5098d89a82c8958aaa290cbf81608e6786ada3f375b124.exe
-
Size
193KB
-
MD5
6fd53443e9d06b950463ce88dba2c4f0
-
SHA1
f43b4b5fee7e1543a75f8b4ebb4873b756fb8a9b
-
SHA256
2a59dbf7629f6deedf5098d89a82c8958aaa290cbf81608e6786ada3f375b124
-
SHA512
0dc6980436ef77fcecd949a3fd7b5e762958ef8aa80463e0b39fde9e90b026e5b988f5e01da0683e288d8be0f5157e7bfa19f7ebafc2f47636be57d600d9e529
-
SSDEEP
6144:nNEbkUC8lRw5Y1pR/xghWdBLgs9D0s6i:n2bkUrlRwS1zxOy70s6i
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2a59dbf7629f6deedf5098d89a82c8958aaa290cbf81608e6786ada3f375b124.exe"C:\Users\Admin\AppData\Local\Temp\2a59dbf7629f6deedf5098d89a82c8958aaa290cbf81608e6786ada3f375b124.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\2a59dbf7629f6deedf5098d89a82c8958aaa290cbf81608e6786ada3f375b124.exe"C:\Users\Admin\AppData\Local\Temp\2a59dbf7629f6deedf5098d89a82c8958aaa290cbf81608e6786ada3f375b124.exe"2⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1216 -s 3643⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 1216 -ip 12161⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
120KB
-
Filesize
120KB
-
Filesize
120KB
-
Filesize
120KB
-
Filesize
204KB
-
Filesize
204KB