Analysis

  • max time kernel
    91s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/10/2022, 22:53

General

  • Target

    94f0e91b85ec1a44ea3fa3ea64f1c961b4a9fe3188ab242dba151582453dfd48.exe

  • Size

    5.2MB

  • MD5

    a0a78301a0f7e4ed18a488c064e14ea7

  • SHA1

    a21c0ca52b6c8362d74b5d7769ffa3e40a8e246b

  • SHA256

    94f0e91b85ec1a44ea3fa3ea64f1c961b4a9fe3188ab242dba151582453dfd48

  • SHA512

    a37a443677f422efcc147d374f9e9aab5330c563fafd6a09abb4ca41302c23150d95d920c8435de2bdbf948b6fabdac1b7e1af088d42d609994afc81df2487be

  • SSDEEP

    98304:zvdbokc64QVgi9QpkR0xkw3zLzOIMiu9AgXz58wW3HuI73hb:zvd0URQpkR0xkSzfOIMiulD5CHuI9b

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Modifies Control Panel 3 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\94f0e91b85ec1a44ea3fa3ea64f1c961b4a9fe3188ab242dba151582453dfd48.exe
    "C:\Users\Admin\AppData\Local\Temp\94f0e91b85ec1a44ea3fa3ea64f1c961b4a9fe3188ab242dba151582453dfd48.exe"
    1⤵
    • Modifies Control Panel
    • Suspicious use of SetWindowsHookEx
    PID:4680
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 4680 -s 1156
      2⤵
      • Program crash
      PID:4704
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4680 -ip 4680
    1⤵
      PID:3356

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/4680-132-0x0000000000400000-0x0000000001907000-memory.dmp

            Filesize

            21.0MB

          • memory/4680-133-0x0000000000400000-0x0000000001907000-memory.dmp

            Filesize

            21.0MB

          • memory/4680-134-0x0000000000400000-0x0000000001907000-memory.dmp

            Filesize

            21.0MB

          • memory/4680-135-0x0000000000400000-0x0000000001907000-memory.dmp

            Filesize

            21.0MB

          • memory/4680-136-0x0000000000400000-0x0000000001907000-memory.dmp

            Filesize

            21.0MB

          • memory/4680-137-0x0000000003770000-0x00000000038B0000-memory.dmp

            Filesize

            1.2MB

          • memory/4680-138-0x0000000003770000-0x00000000038B0000-memory.dmp

            Filesize

            1.2MB

          • memory/4680-139-0x0000000003770000-0x00000000038B0000-memory.dmp

            Filesize

            1.2MB

          • memory/4680-140-0x0000000003770000-0x00000000038B0000-memory.dmp

            Filesize

            1.2MB

          • memory/4680-141-0x0000000003770000-0x00000000038B0000-memory.dmp

            Filesize

            1.2MB

          • memory/4680-142-0x0000000003770000-0x00000000038B0000-memory.dmp

            Filesize

            1.2MB

          • memory/4680-143-0x0000000003770000-0x00000000038B0000-memory.dmp

            Filesize

            1.2MB

          • memory/4680-144-0x0000000003770000-0x00000000038B0000-memory.dmp

            Filesize

            1.2MB

          • memory/4680-145-0x0000000003770000-0x00000000038B0000-memory.dmp

            Filesize

            1.2MB

          • memory/4680-146-0x0000000000400000-0x0000000001907000-memory.dmp

            Filesize

            21.0MB