Analysis
-
max time kernel
162s -
max time network
201s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
25-11-2022 19:32
Static task
static1
Behavioral task
behavioral1
Sample
927120183cda5bb597632a67c9a6ef718458aa3c8e6244ca0540e1e84ea99cb0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
927120183cda5bb597632a67c9a6ef718458aa3c8e6244ca0540e1e84ea99cb0.exe
Resource
win10v2004-20221111-en
General
-
Target
927120183cda5bb597632a67c9a6ef718458aa3c8e6244ca0540e1e84ea99cb0.exe
-
Size
208KB
-
MD5
a478f42505f950c7a715fbd49075fbe0
-
SHA1
6e42165ab9da53bda02f405aa78221ec7d4dffc4
-
SHA256
927120183cda5bb597632a67c9a6ef718458aa3c8e6244ca0540e1e84ea99cb0
-
SHA512
e969877a0c6bd8e997061e9c0eebf8dd4ccf9c23bc397cdb53a74323b1f6f39527df0c62c8184b14ae5a7ef2dc9de29ee26eeb34f35f65d1208b4fe2907d6c85
-
SSDEEP
1536:Vfuxw10lxJM5y8w5OZRVmgyDl+cWaxJcveQZNTRSb3EBAR1AlQPsxjheYhpXN5yh:f0OtF2Qo7VsJgisxlYegEX0ZZbW
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3620 1152 WerFault.exe 927120183cda5bb597632a67c9a6ef718458aa3c8e6244ca0540e1e84ea99cb0.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
927120183cda5bb597632a67c9a6ef718458aa3c8e6244ca0540e1e84ea99cb0.exepid process 1152 927120183cda5bb597632a67c9a6ef718458aa3c8e6244ca0540e1e84ea99cb0.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\927120183cda5bb597632a67c9a6ef718458aa3c8e6244ca0540e1e84ea99cb0.exe"C:\Users\Admin\AppData\Local\Temp\927120183cda5bb597632a67c9a6ef718458aa3c8e6244ca0540e1e84ea99cb0.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:1152 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1152 -s 4642⤵
- Program crash
PID:3620
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1152 -ip 11521⤵PID:1928