Analysis
-
max time kernel
146s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
20-11-2022 03:43
Static task
static1
Behavioral task
behavioral1
Sample
8751c9c2b10285b625eb2cfed9592dd3ed19e57bc1c818c43d40d5f0f1d96ec9.exe
Resource
win7-20221111-en
windows7-x64
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
8751c9c2b10285b625eb2cfed9592dd3ed19e57bc1c818c43d40d5f0f1d96ec9.exe
Resource
win10v2004-20221111-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
8751c9c2b10285b625eb2cfed9592dd3ed19e57bc1c818c43d40d5f0f1d96ec9.exe
-
Size
201KB
-
MD5
004552c78c12616e07ed593729038c0d
-
SHA1
b2dce0331b16c0bbadb11322fd7f135cb0c68400
-
SHA256
8751c9c2b10285b625eb2cfed9592dd3ed19e57bc1c818c43d40d5f0f1d96ec9
-
SHA512
430933a40e02fe9ed081a645575b291efe9b4f9d8d08c142c39e62db88a1d2feb9978e72b85781c26e1987f19a21250001fa85026619619d85acac9b390811d4
-
SSDEEP
6144:Hza2Nj+MLxwkcWTq/81DDiSTz9nqEja3TXU0xtFa:HqEjk7l7Fa
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 740 3260 WerFault.exe 81 -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3260 8751c9c2b10285b625eb2cfed9592dd3ed19e57bc1c818c43d40d5f0f1d96ec9.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\8751c9c2b10285b625eb2cfed9592dd3ed19e57bc1c818c43d40d5f0f1d96ec9.exe"C:\Users\Admin\AppData\Local\Temp\8751c9c2b10285b625eb2cfed9592dd3ed19e57bc1c818c43d40d5f0f1d96ec9.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:3260 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3260 -s 4642⤵
- Program crash
PID:740
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3260 -ip 32601⤵PID:2584