Analysis
-
max time kernel
73s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
26-02-2023 19:30
General
-
Target
537f640180dc938e8174a36a962f28274b5300d0a75942d9ab42d25e48ca9f03.exe
-
Size
1.0MB
-
MD5
570a4061122aefa33f068b6f6b6a0a73
-
SHA1
56190016fbcbc1c69b08ab4b7f156985192149b7
-
SHA256
537f640180dc938e8174a36a962f28274b5300d0a75942d9ab42d25e48ca9f03
-
SHA512
c5d4a9d39d70df7d45ee1fcdb997df9aa5a75d44ca8469a03ccefa9a20baca0f86f64ac37ea01a0ee4c327c17e8449791da2c121055fd1df0ca32207f37aa5fb
-
SSDEEP
12288:0+XMPDBxHwGgJ9GDd0R7OGK/GUlyeG8aEjHO2WbY7XT6CZI37:0++H3gJcZ27O9/G6ye8ETO2Wbmqr
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\537f640180dc938e8174a36a962f28274b5300d0a75942d9ab42d25e48ca9f03.exe"C:\Users\Admin\AppData\Local\Temp\537f640180dc938e8174a36a962f28274b5300d0a75942d9ab42d25e48ca9f03.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1020 -s 6082⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 1020 -ip 10201⤵