Analysis
-
max time kernel
190s -
max time network
191s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
06/12/2022, 10:17
General
-
Target
e19428082cb09c0af6a2a564f634a338cbe0c8b896f2053ec70d8d25294bbfba.exe
-
Size
132KB
-
MD5
73c0dad3c6b0af88ab3c815141563792
-
SHA1
c05a9c91fc4e12f89f807f5bcd19ef0ff7ddfc6d
-
SHA256
e19428082cb09c0af6a2a564f634a338cbe0c8b896f2053ec70d8d25294bbfba
-
SHA512
119fb02915496a7b19b0357ea8f1fbf01400e2d49d289acbecf99a5b050e3f97a1f2e9f1aaedac7082107f852551a1708bbd25351963d70f652586d476208a35
-
SSDEEP
768:BIwV+V+VcIVcVBHCXye6H7fhm6mPpOlNpvANDF5fixnAdc5o0G5saW0GgxNbPr:/V+V+VVV2cXmbfAzwiDWSBW0z
Score
8/10
Malware Config
Signatures
-
ASPack v2.12-2.42 2 IoCs
Detects executables packed with ASPack v2.12-2.42
-
Suspicious use of SetThreadContext 1 IoCs
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e19428082cb09c0af6a2a564f634a338cbe0c8b896f2053ec70d8d25294bbfba.exe"C:\Users\Admin\AppData\Local\Temp\e19428082cb09c0af6a2a564f634a338cbe0c8b896f2053ec70d8d25294bbfba.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\e19428082cb09c0af6a2a564f634a338cbe0c8b896f2053ec70d8d25294bbfba.exeC:\Users\Admin\AppData\Local\Temp\e19428082cb09c0af6a2a564f634a338cbe0c8b896f2053ec70d8d25294bbfba.exe2⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4748 -s 4603⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 4748 -ip 47481⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
512B
-
Filesize
4KB
-
Filesize
132KB
-
Filesize
132KB