Analysis
-
max time kernel
75s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
04-08-2023 21:05
Static task
static1
Behavioral task
behavioral1
Sample
55ac676c34640b15c57f9703415a238925203711d2df8997048a5c0f209e8996.exe
Resource
win7-20230712-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
55ac676c34640b15c57f9703415a238925203711d2df8997048a5c0f209e8996.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
55ac676c34640b15c57f9703415a238925203711d2df8997048a5c0f209e8996.exe
-
Size
1.3MB
-
MD5
c8d9f0b4b6d93a3f8ea5ce7bcaefda28
-
SHA1
03b425e925e79c53f0f6ba8ae3b060b271994c9d
-
SHA256
55ac676c34640b15c57f9703415a238925203711d2df8997048a5c0f209e8996
-
SHA512
7b48f93c3d5113993671f88be44bd9eca9b255880061d729533f08dd0a7c3797f99084cf878bf9129e7291ff7a2a587f709f6b2377d795e5a97a9a23bdf7b9fe
-
SSDEEP
24576:fB18UIWZnFfMquQDl9+eGhOAc+G9bueXjuQ/9:fjZequ4vr9vz
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3708 1340 WerFault.exe 84 -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1340 55ac676c34640b15c57f9703415a238925203711d2df8997048a5c0f209e8996.exe 1340 55ac676c34640b15c57f9703415a238925203711d2df8997048a5c0f209e8996.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\55ac676c34640b15c57f9703415a238925203711d2df8997048a5c0f209e8996.exe"C:\Users\Admin\AppData\Local\Temp\55ac676c34640b15c57f9703415a238925203711d2df8997048a5c0f209e8996.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:1340 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1340 -s 6922⤵
- Program crash
PID:3708
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1340 -ip 13401⤵PID:2176