Analysis
-
max time kernel
151s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
01-12-2022 05:03
General
-
Target
3a0469efba8301511c5c8479c42524e475552f3cf3d637c8617a2f5848e18cb2.exe
-
Size
963KB
-
MD5
4ba5d71f9efc66a352d04471c1a4c8ce
-
SHA1
d755e7137f2149040ced6797bd48aa4a3517566a
-
SHA256
3a0469efba8301511c5c8479c42524e475552f3cf3d637c8617a2f5848e18cb2
-
SHA512
ca71459d4cc6d7d432f4ba237e326ecaee35bfd4fdb8108546ebe8d89e5f956c6bea7dfa6999ea7c49c7a7530f3ac686b52e73beebea44a03fe9204f9b8b8a66
-
SSDEEP
24576:Do9h/uGBZ7BjAzqf4Xn+dWav17ZT+WpCB1rrVKdbkwoGpNDt:DoNZ1jAzDn+drv1V+Wk/kdbiaf
Score
8/10
Malware Config
Signatures
-
UPX packed file 26 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3a0469efba8301511c5c8479c42524e475552f3cf3d637c8617a2f5848e18cb2.exe"C:\Users\Admin\AppData\Local\Temp\3a0469efba8301511c5c8479c42524e475552f3cf3d637c8617a2f5848e18cb2.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1088 -s 7442⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 1088 -ip 10881⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
-
Filesize
12KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
12KB
-
Filesize
1.8MB
-
Filesize
244KB