Analysis
-
max time kernel
190s -
max time network
201s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
01/12/2022, 09:27
General
-
Target
b91d05cf63e7ce2e86905873b6d66f1f6ce6148abb9da9175ae615b0ccc9a8fa.exe
-
Size
320KB
-
MD5
e9828f5543756660909fd70604f3c950
-
SHA1
346549fde030f1e967a8b47c7dbfbdc770070bcc
-
SHA256
b91d05cf63e7ce2e86905873b6d66f1f6ce6148abb9da9175ae615b0ccc9a8fa
-
SHA512
3bde3c63edaef2d62267102c00a0058a991e6b245c3d05b96010117d4e16cc0f3765218389ad9061d8d8460bf809961be8f6725768f650b6c5bae0533a4402d6
-
SSDEEP
6144:9no/OrzcE/RsF2mMVsEhpN0REFxCfQvcBe0/f7KXXVe5:FoWr7yKhi2Fxau0/f7KHS
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b91d05cf63e7ce2e86905873b6d66f1f6ce6148abb9da9175ae615b0ccc9a8fa.exe"C:\Users\Admin\AppData\Local\Temp\b91d05cf63e7ce2e86905873b6d66f1f6ce6148abb9da9175ae615b0ccc9a8fa.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\b91d05cf63e7ce2e86905873b6d66f1f6ce6148abb9da9175ae615b0ccc9a8fa.exeC:\Users\Admin\AppData\Local\Temp\b91d05cf63e7ce2e86905873b6d66f1f6ce6148abb9da9175ae615b0ccc9a8fa.exe2⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 436 -s 803⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 436 -ip 4361⤵