Analysis
-
max time kernel
91s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
22-08-2023 18:37
General
-
Target
7a9ddef595e8384cee582815933d1699c8e366b1dfcbb19fe3b9574173f98cd1.exe
-
Size
5.1MB
-
MD5
096bd84e4351be07782a6f6b24297ca2
-
SHA1
01f6d161d4615d78be913dfb1c2866ec0cea411f
-
SHA256
7a9ddef595e8384cee582815933d1699c8e366b1dfcbb19fe3b9574173f98cd1
-
SHA512
46384a3af6ba652f1584806d831c97055474d522fe653a08ab5ef8c23ba71e99aaaa8d522614244352cb7afbc82a722d4e042b9c6134926ef1a51676fd7f6e07
-
SSDEEP
98304:hZQRKa4M6aaGFsKfhWPJz7nPQLACCEqk4WrqmRxe+6BXIe+qOOW6tGWCioZTEPCg:3IB41AFsKfhWRy/Xel6qOv6ThOEaVvYH
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7a9ddef595e8384cee582815933d1699c8e366b1dfcbb19fe3b9574173f98cd1.exe"C:\Users\Admin\AppData\Local\Temp\7a9ddef595e8384cee582815933d1699c8e366b1dfcbb19fe3b9574173f98cd1.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 832 -s 9802⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 832 -ip 8321⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.8MB
-
Filesize
960KB
-
Filesize
2.1MB
-
Filesize
960KB
-
Filesize
2.1MB
-
Filesize
5.8MB
-
Filesize
2.1MB
-
Filesize
960KB