Analysis
-
max time kernel
178s -
max time network
188s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
23-11-2022 17:00
General
-
Target
201408282238374348/0829.exe
-
Size
780KB
-
MD5
02935485df3f762a7b4d3ae781825e55
-
SHA1
c609ae60fd219da77e367fc3686df781d755b2ba
-
SHA256
64cbbc316a9b30685f0b06e4fd475533d6028f0aa7d9c2977b63596b47e18be3
-
SHA512
483653b062e1593fbc692ee41ab82e796cb33fd22c29cb07071bac3b94f17598aefbfcd6fe4ca88e2e6bea41c87465060b249c19356174dcf62020825de7e58e
-
SSDEEP
12288:tsXrESj0g66QAvraaYMj7cuIx4OhaN38S2bpfhaKA4cMXeY1v5velcKKxrGtuv7:mXr4AvhPcuI1haqfVZfuY1vynWrGts
Score
8/10
Malware Config
Signatures
-
UPX packed file 26 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\201408282238374348\0829.exe"C:\Users\Admin\AppData\Local\Temp\201408282238374348\0829.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4580 -s 8002⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4580 -ip 45801⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
2.5MB
-
Filesize
2.5MB