Analysis
-
max time kernel
151s -
max time network
168s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
03/12/2022, 21:50
General
-
Target
d61a9dd9baa602b487774afc3d4f8551ac023ce83c816b81c83b098cdb317776.exe
-
Size
24KB
-
MD5
420ad02d5322be62be211d54fc081fcc
-
SHA1
81701872e41e8fa32919897a276f265b299079f6
-
SHA256
d61a9dd9baa602b487774afc3d4f8551ac023ce83c816b81c83b098cdb317776
-
SHA512
ba9fdb37446a014f145b2d52fd20d353fa3862aa41e7d0dedb963e23d12e21342494bcd810564ba52fe0f38cc9c6ca19b942e55623c8717325939951c74d933a
-
SSDEEP
192:5xg+mByu8Bq55LvmFLx0cN1qoHx5rqKn8dr6r4dbg:5xg+m4u8Bq55L+FLaUquOg
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d61a9dd9baa602b487774afc3d4f8551ac023ce83c816b81c83b098cdb317776.exe"C:\Users\Admin\AppData\Local\Temp\d61a9dd9baa602b487774afc3d4f8551ac023ce83c816b81c83b098cdb317776.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\d61a9dd9baa602b487774afc3d4f8551ac023ce83c816b81c83b098cdb317776.exeC:\Users\Admin\AppData\Local\Temp\d61a9dd9baa602b487774afc3d4f8551ac023ce83c816b81c83b098cdb3177762⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3912 -s 803⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3912 -ip 39121⤵