Analysis
-
max time kernel
148s -
max time network
189s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
07-11-2022 02:05
General
-
Target
2c0c5c111cf1a190f04773ae1da276c139def1ea8052a612b39c80fd89343fc8.exe
-
Size
27KB
-
MD5
0e424406dc93600d73ed0f2726658790
-
SHA1
f5c2971e52b1da4f10a232d36ddcac2e7758ce5a
-
SHA256
2c0c5c111cf1a190f04773ae1da276c139def1ea8052a612b39c80fd89343fc8
-
SHA512
bb4550acfa2164ff2fda972b81e5ac62ac9c0d5b4928fdcec3f289691c8026d815bf0bb06facd823d3d1c4c3f8e0fa8c50c8e91e4e1419cf1ffdf7ba02d3a9b2
-
SSDEEP
384:FxO2xcHkI1zEvwwcfrOLzSjBT7ZA2jaMHJcRxjilzgHGQybPp1VHZ:3PwkI1H5B/VJAxjcUHGQI3v
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2c0c5c111cf1a190f04773ae1da276c139def1ea8052a612b39c80fd89343fc8.exe"C:\Users\Admin\AppData\Local\Temp\2c0c5c111cf1a190f04773ae1da276c139def1ea8052a612b39c80fd89343fc8.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\svchost.exesvchost.exe2⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3492 -s 123⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3492 -ip 34921⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
20KB
-
-
Filesize
40KB
-
Filesize
40KB