Analysis
-
max time kernel
150s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
07-11-2022 02:01
General
-
Target
9e23c137d6e604ac977f89bdafa45accde09ff4255fa984c0b4226f60eb84d35.exe
-
Size
298KB
-
MD5
0c676eb1692a92a705741173ea867074
-
SHA1
729b9d38bb9e21ccb6f8f4a79656eea432bc6835
-
SHA256
9e23c137d6e604ac977f89bdafa45accde09ff4255fa984c0b4226f60eb84d35
-
SHA512
549e1265d7e590920650833767e9ef31e590e5b16489a71a3ee08f3eaee6758d37868ea1dafb31120c06999496d9a88af40f7ee6e54a80291e4cdf6878a52eb7
-
SSDEEP
6144:h98vaUNARKdww07LLqZA46PQEdGfmPaB7/WIvnksEVA14hYp9tY:0xNAC6aZuPDdbPGr1vklode
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Program crash 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 8 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9e23c137d6e604ac977f89bdafa45accde09ff4255fa984c0b4226f60eb84d35.exe"C:\Users\Admin\AppData\Local\Temp\9e23c137d6e604ac977f89bdafa45accde09ff4255fa984c0b4226f60eb84d35.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\9e23c137d6e604ac977f89bdafa45accde09ff4255fa984c0b4226f60eb84d35.exe"C:\Users\Admin\AppData\Local\Temp\9e23c137d6e604ac977f89bdafa45accde09ff4255fa984c0b4226f60eb84d35.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2200 -s 6323⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 2200 -ip 22001⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
272KB
-
Filesize
272KB
-
Filesize
272KB
-
Filesize
272KB
-
Filesize
272KB
-
Filesize
272KB
-
Filesize
16KB