Analysis
-
max time kernel
149s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
23-11-2022 13:36
General
-
Target
db0d2057729ba60a238523beb11aaeee.exe
-
Size
18.6MB
-
MD5
db0d2057729ba60a238523beb11aaeee
-
SHA1
eac138a0700869dbf217487f748c91ac3262895b
-
SHA256
5036373ee800193e70a2d4f7175b6974316747723dd1cd08e5e862b0c58d21c4
-
SHA512
ebf3a6f398728a3b8b5e2f81c37646a149b30ea11f8e72665a206524af12f940bb408d0f7b4c2822bb5121eb3fb74691157dd3a43470d469910a4d69a404b279
-
SSDEEP
196608:dgPGdQe1m/X5rT8fQoAkeSu2KDS93IjVZ392XEA4d8632izsQhnBwxiD5wo6Osf2:jgPd8fQoPPii4jVb2Ob2iQ7xiAJ1s5
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\db0d2057729ba60a238523beb11aaeee.exe"C:\Users\Admin\AppData\Local\Temp\db0d2057729ba60a238523beb11aaeee.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 528 -s 16682⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 528 -ip 5281⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
24.5MB
-
Filesize
3.2MB
-
Filesize
1.0MB
-
Filesize
24.5MB
-
Filesize
24.5MB