Analysis
-
max time kernel
150s -
max time network
161s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
20-11-2022 03:43
Static task
static1
Behavioral task
behavioral1
Sample
7881b2cfe55300fc082312e109b8f226010fe586999c9ca87da7dbe0daad2bde.exe
Resource
win7-20220812-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
7881b2cfe55300fc082312e109b8f226010fe586999c9ca87da7dbe0daad2bde.exe
Resource
win10v2004-20220812-en
2 signatures
150 seconds
General
-
Target
7881b2cfe55300fc082312e109b8f226010fe586999c9ca87da7dbe0daad2bde.exe
-
Size
201KB
-
MD5
23fa0fef80fa2e8ba41ae5546a27c13c
-
SHA1
f5e41fa9f767247df59fb40b1ac423fb700f8f55
-
SHA256
7881b2cfe55300fc082312e109b8f226010fe586999c9ca87da7dbe0daad2bde
-
SHA512
64719f22b06a5ad498eedb605051454e123607908feaf20af6a4042ddc1dc3ae523973e1f5a1c3ca27443d670f46ca66aaf51b72756f1c902109e459dc4caea5
-
SSDEEP
6144:Hza2Nj+MLxwkcWTq/81DDiSTz9nqEja3TXU0xtFE:HqEjk7l7FE
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4880 4560 WerFault.exe 81 -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4560 7881b2cfe55300fc082312e109b8f226010fe586999c9ca87da7dbe0daad2bde.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\7881b2cfe55300fc082312e109b8f226010fe586999c9ca87da7dbe0daad2bde.exe"C:\Users\Admin\AppData\Local\Temp\7881b2cfe55300fc082312e109b8f226010fe586999c9ca87da7dbe0daad2bde.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:4560 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4560 -s 4642⤵
- Program crash
PID:4880
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4560 -ip 45601⤵PID:3912