Analysis

  • max time kernel
    91s
  • max time network
    130s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2022, 14:57

General

  • Target

    f7b179af5dc24dd5a2e3907d7e9fe7c7ee15e764a6cd0604b4aa2129a5ea8b3b.exe

  • Size

    26KB

  • MD5

    6a91632dc27ce6ce07384134656544f0

  • SHA1

    3bfbf0338332372d8fb9d9620b163fa80feaa335

  • SHA256

    f7b179af5dc24dd5a2e3907d7e9fe7c7ee15e764a6cd0604b4aa2129a5ea8b3b

  • SHA512

    fe64cfe20fb71e4d2443437a8a7436caad62b38e38438211faa7abb985330320e721c272f157b184760f0cbd22563b7ac42733bbec2c5321400598fef11ede03

  • SSDEEP

    384:lVIdWITfldrtXWKuG4mEOEEvXEIp6u7pxqiePgl9ffwQRu4yLx0Fq9:lVIdW+nrFbZp626OAQTyLx0Fq9

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f7b179af5dc24dd5a2e3907d7e9fe7c7ee15e764a6cd0604b4aa2129a5ea8b3b.exe
    "C:\Users\Admin\AppData\Local\Temp\f7b179af5dc24dd5a2e3907d7e9fe7c7ee15e764a6cd0604b4aa2129a5ea8b3b.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4880
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 4880 -s 468
      2⤵
      • Program crash
      PID:3372
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 204 -p 4880 -ip 4880
    1⤵
      PID:1028

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads