Analysis
-
max time kernel
168s -
max time network
176s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
21-11-2022 16:42
Static task
static1
Behavioral task
behavioral1
Sample
68896b6a4590866ae77a661b5b95a5a101fc8f4065708408d20a63d0893d0636.exe
Resource
win7-20220812-en
windows7-x64
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
68896b6a4590866ae77a661b5b95a5a101fc8f4065708408d20a63d0893d0636.exe
Resource
win10v2004-20221111-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
68896b6a4590866ae77a661b5b95a5a101fc8f4065708408d20a63d0893d0636.exe
-
Size
201KB
-
MD5
2269a8c31af792aa1b84945955d38331
-
SHA1
de54905cd3e556d5a280c6d78531fb23677f54c4
-
SHA256
68896b6a4590866ae77a661b5b95a5a101fc8f4065708408d20a63d0893d0636
-
SHA512
aeb02c7b18e91b782d302abcda5301cee3ad02fbec9fb63c86507d20d1bfb95b1d3bf31383a30bd9704dd7bef30ef1119358a19f67819596c8665e5517af2454
-
SSDEEP
6144:Hza2Nj+MLxwkcWTq/81DDiSTz9nqEja3TXU0xtF2:HqEjk7l7F2
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2008 2212 WerFault.exe 81 -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2212 68896b6a4590866ae77a661b5b95a5a101fc8f4065708408d20a63d0893d0636.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\68896b6a4590866ae77a661b5b95a5a101fc8f4065708408d20a63d0893d0636.exe"C:\Users\Admin\AppData\Local\Temp\68896b6a4590866ae77a661b5b95a5a101fc8f4065708408d20a63d0893d0636.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:2212 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2212 -s 4642⤵
- Program crash
PID:2008
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 2212 -ip 22121⤵PID:4520