Analysis

  • max time kernel
    141s
  • max time network
    160s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/11/2022, 17:27

General

  • Target

    93d50e4c584cd27f1f02f0fed00855d7c395eae6c6be94d1a93301aec50f6ec9.exe

  • Size

    328KB

  • MD5

    50d15528ad6911af043b7f3af99649bb

  • SHA1

    db10ab167e0ba8e73da25694adee76511ff7fe38

  • SHA256

    93d50e4c584cd27f1f02f0fed00855d7c395eae6c6be94d1a93301aec50f6ec9

  • SHA512

    9d8f9cc4ce7de8d9561d6f76d77bb7b7e76ea782d9491d8f9fd100b44e2c2f3755a547073274d0c3e21337491a9991a8dd98e4c03239935673320d3e1a231406

  • SSDEEP

    3072:13EaEhQYN/UpD+cu5p0fZahWA69l2zzk1wV4Ghq4ibRSWoBEtazeV5bo9f:13HjYdWD+cZ1wV45o6tazeVUf

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\93d50e4c584cd27f1f02f0fed00855d7c395eae6c6be94d1a93301aec50f6ec9.exe
    "C:\Users\Admin\AppData\Local\Temp\93d50e4c584cd27f1f02f0fed00855d7c395eae6c6be94d1a93301aec50f6ec9.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1080
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 1080 -s 524
      2⤵
      • Program crash
      PID:4332
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1080 -ip 1080
    1⤵
      PID:2408

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads