Analysis

  • max time kernel
    142s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-08-2023 07:21

General

  • Target

    e72623148cc1703323c22b1a4c113632077982d94ab56ee727a516494836b2e6.exe

  • Size

    826KB

  • MD5

    301b9b106db7548e6db2d91acc3cbebf

  • SHA1

    5a54f8b66422fba00dbc38d19f67003afa86d271

  • SHA256

    e72623148cc1703323c22b1a4c113632077982d94ab56ee727a516494836b2e6

  • SHA512

    9fcacdcb0f94ec769d33c657d142f1dca9b7b2b29cda760872b772c9095c2534bfa7fca7e1251831646826a657f4e3d60deadb4206a8142781130986219970fd

  • SSDEEP

    24576:uU93DnhQkRz8Bu1mv8TIH1efjTC8Bng1O:P93SV4KSIH1muE

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e72623148cc1703323c22b1a4c113632077982d94ab56ee727a516494836b2e6.exe
    "C:\Users\Admin\AppData\Local\Temp\e72623148cc1703323c22b1a4c113632077982d94ab56ee727a516494836b2e6.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1160
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 1160 -s 732
      2⤵
      • Program crash
      PID:4616
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 1160 -ip 1160
    1⤵
      PID:1468

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1160-0-0x0000000000400000-0x0000000000659000-memory.dmp

      Filesize

      2.3MB

    • memory/1160-1-0x00000000024D0000-0x000000000252F000-memory.dmp

      Filesize

      380KB

    • memory/1160-2-0x0000000002740000-0x0000000002741000-memory.dmp

      Filesize

      4KB

    • memory/1160-3-0x0000000002700000-0x0000000002701000-memory.dmp

      Filesize

      4KB

    • memory/1160-4-0x00000000026F0000-0x00000000026F1000-memory.dmp

      Filesize

      4KB

    • memory/1160-5-0x0000000002730000-0x0000000002731000-memory.dmp

      Filesize

      4KB

    • memory/1160-6-0x0000000002710000-0x0000000002711000-memory.dmp

      Filesize

      4KB

    • memory/1160-7-0x0000000002760000-0x0000000002761000-memory.dmp

      Filesize

      4KB

    • memory/1160-8-0x0000000003620000-0x0000000003621000-memory.dmp

      Filesize

      4KB

    • memory/1160-9-0x0000000003610000-0x0000000003611000-memory.dmp

      Filesize

      4KB

    • memory/1160-10-0x0000000003600000-0x0000000003602000-memory.dmp

      Filesize

      8KB

    • memory/1160-11-0x0000000003670000-0x0000000003671000-memory.dmp

      Filesize

      4KB

    • memory/1160-12-0x0000000003660000-0x0000000003661000-memory.dmp

      Filesize

      4KB

    • memory/1160-13-0x0000000000400000-0x0000000000659000-memory.dmp

      Filesize

      2.3MB

    • memory/1160-14-0x00000000024D0000-0x000000000252F000-memory.dmp

      Filesize

      380KB