Analysis

  • max time kernel
    146s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-11-2022 03:27

General

  • Target

    8d4e4c0ea7b5ccea71eaaabedff3a0425aa85a1c781a16d2b8c1dae0fd33eef7.exe

  • Size

    168KB

  • MD5

    bfb032e58d2261f38f426beb2a983f0c

  • SHA1

    cfa067f51edb5022cc1ee7bd78836b9330c0904b

  • SHA256

    8d4e4c0ea7b5ccea71eaaabedff3a0425aa85a1c781a16d2b8c1dae0fd33eef7

  • SHA512

    a608acb5d110b263332c729a198038e0512cbb3a14af2d14de05b65ac5622bba4bcdb923532251b4f9d1daa0bab73784f9f9e66e7db2658a75aecf446605a5b1

  • SSDEEP

    3072:H0O2LRj5h3QKWXXWXG8FF7K+AmsgE5kEZZZy6x8z4oQZiE6J:iRjX3QKKXWFFF7KlgaS/W

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8d4e4c0ea7b5ccea71eaaabedff3a0425aa85a1c781a16d2b8c1dae0fd33eef7.exe
    "C:\Users\Admin\AppData\Local\Temp\8d4e4c0ea7b5ccea71eaaabedff3a0425aa85a1c781a16d2b8c1dae0fd33eef7.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4488
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 4488 -s 464
      2⤵
      • Program crash
      PID:1240
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4488 -ip 4488
    1⤵
      PID:5016

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4488-134-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/4488-135-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB