Analysis

  • max time kernel
    145s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/10/2023, 10:42

General

  • Target

    SecuriteInfo.com.Trojan.SuspectCRC.8106.15821.exe

  • Size

    469KB

  • MD5

    fda071cd314c32dad3f91e0c6638efd3

  • SHA1

    f765f61f7ca510c3274aefed42966410542be5d5

  • SHA256

    5aaa352f6bc63d6ac8826f1c534991e4027e9fe1ac0810e13e389b8e9ca51c05

  • SHA512

    8e84b419d16565063ab92eb9040234369929ffb24ce7794e346c0d20293aa24361e88578356270bfe02bb3d4bdd3a99835ca4be1cf7e177e61b3122326ed04fa

  • SSDEEP

    3072:yNzJHjI21EUsK+hTzYd1K4711Ewmf2O/E9TGMV6:EzJZOwo

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.SuspectCRC.8106.15821.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.SuspectCRC.8106.15821.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4556
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 4556 -s 2652
      2⤵
      • Program crash
      PID:3672
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4556 -ip 4556
    1⤵
      PID:412

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\2DXCP35H\8CFAOG0Z.htm

      Filesize

      178B

      MD5

      cd2e0e43980a00fb6a2742d3afd803b8

      SHA1

      81ffbd1712afe8cdf138b570c0fc9934742c33c1

      SHA256

      bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d

      SHA512

      0344c6b2757d4d787ed4a31ec7043c9dc9bf57017e451f60cecb9ad8f5febf64acf2a6c996346ae4b23297623ebf747954410aee27ee3c2f3c6ccd15a15d0f2d

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\2DXCP35H\sideTool-fd4d44bd[1].css

      Filesize

      8KB

      MD5

      b2b2c34fbd807eb9e3f35d99e8454ebb

      SHA1

      bafa7323ba78915269a87aa0e7e6e7054e9dcbd8

      SHA256

      3d30674ac51edf82717ae0c511ae28960ab9748f4c58fbfc90329e4c4ce61a03

      SHA512

      f854c1a0489c71885cf331eea22afbab8f65f3f38d653baf5ffbb272b02f1379d432c3012ded2d91138c0df1c3eac948c05dd06d515b97ff05dc4042a5d0f5e5

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\7H3JZN74\index-5de4219c[1].css

      Filesize

      70KB

      MD5

      ee4ddb0248a08e61d9a7a0b612abc3db

      SHA1

      101c94bbe9505f2d8d9dc3c636a78a7771f6cbb1

      SHA256

      dc87bdd8f6c8d73aab092ce4553a3008da006151d590620ee412e77cfd47cec8

      SHA512

      5edb4973c8a00337063402721f5a42bbcea3f32d28f8f004e7fce6fb39b5204de08e13189e7fa621a1fed6d73fd4d2f15b7c2475e1c3cdd25ef3ffe52ebae810

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\EGWOM5I1\index-762c0b1b[1].css

      Filesize

      4KB

      MD5

      b1c6769dc2493ba4dc97625e813805c4

      SHA1

      eccfca0e135afcbcac9a793074750f1a5d827e10

      SHA256

      88915b40ae5e41f3cd1a16afea2427ad53709ae94f89236860a4d617536e7824

      SHA512

      16e21e87276c40145df7bb00f2b22f15c4a4b4e1a7b6665d611187ac3dffe72770b0bc9408eaf035c6af888edfef81fad3297c52a3574052d9ee4f7be29ce898

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\EGWOM5I1\index-dc1114c2[1].css

      Filesize

      135KB

      MD5

      f4e3a03a3799e95fba268e0d5463142b

      SHA1

      bd3a1f79b241704c4ef62593b0f4a3a14529d347

      SHA256

      6513e54a9af844c40aeb1bd005d86302aea4b78a0f4421a3bbb5d639be4c7dd8

      SHA512

      b0e75a965352e9d3e455ce33842f842522e17724b172383e02a986426622eaaf4d00c5d5c6edcd4c1983e2b5c21e45745591c7a9231f6ad3b35790c588c7f99c