Analysis
-
max time kernel
154s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
04/12/2022, 13:11
General
-
Target
e480352758da4ff3eba0f6f06bc314e1edfbb93c6d8d871aa4f4ea866d4acb69.exe
-
Size
78KB
-
MD5
badd13be68da2477fca3e204f3015320
-
SHA1
19c213f48cdc1029a64058aca27177a9b5590ed3
-
SHA256
e480352758da4ff3eba0f6f06bc314e1edfbb93c6d8d871aa4f4ea866d4acb69
-
SHA512
d06d1785cb547465f489137f239a98ff53737475ec1dda23019787fdeb4ba3e043f55b0576426bd5d8a84779e047a9adc4c44c75c2e4e17b420779b799018bfb
-
SSDEEP
768:iJ37N9NNmYle5FhAJYVndC70YRVdYQXJXUcVZpT/fpXGhMhj2N9Tgy9bwe8:yLbNNOMtVpycVvfC/TNN8
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e480352758da4ff3eba0f6f06bc314e1edfbb93c6d8d871aa4f4ea866d4acb69.exe"C:\Users\Admin\AppData\Local\Temp\e480352758da4ff3eba0f6f06bc314e1edfbb93c6d8d871aa4f4ea866d4acb69.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\e480352758da4ff3eba0f6f06bc314e1edfbb93c6d8d871aa4f4ea866d4acb69.exeC:\Users\Admin\AppData\Local\Temp\e480352758da4ff3eba0f6f06bc314e1edfbb93c6d8d871aa4f4ea866d4acb69.exe2⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3208 -s 4603⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3208 -ip 32081⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12KB
-
Filesize
10KB