Analysis
-
max time kernel
90s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
01-12-2022 17:26
General
-
Target
ce283a23c82485c231b6c49c153e73216c6abcea47badd36bac5cf8c8b18e79c.exe
-
Size
176KB
-
MD5
7de52557fb28e56ad9eb4ad7f88114c3
-
SHA1
2b298b43d13ef6ef6a98e18a721fc40f91dcc10e
-
SHA256
ce283a23c82485c231b6c49c153e73216c6abcea47badd36bac5cf8c8b18e79c
-
SHA512
50bb726e6e6a33a24aee1055780e475ae20c17afd4a341776674fa0f9d35a3121cfdafb09e290de390c9a213d64d391518daba954c759aa14da9b807ddb95cd1
-
SSDEEP
3072:T5sZ5T3l3U/vdcQ9lbAQwpMDnpuOMh7X6u4YU/Qzm+IJZAz4Wv7L:dSTV3U/tkzSD+7X6ulGQSJWz48L
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ce283a23c82485c231b6c49c153e73216c6abcea47badd36bac5cf8c8b18e79c.exe"C:\Users\Admin\AppData\Local\Temp\ce283a23c82485c231b6c49c153e73216c6abcea47badd36bac5cf8c8b18e79c.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\ce283a23c82485c231b6c49c153e73216c6abcea47badd36bac5cf8c8b18e79c.exe"C:\Users\Admin\AppData\Local\Temp\ce283a23c82485c231b6c49c153e73216c6abcea47badd36bac5cf8c8b18e79c.exe"2⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4920 -s 123⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 4920 -ip 49201⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
176KB
-
Filesize
176KB
-
Filesize
16KB
-
Filesize
228KB
-
Filesize
36KB