Analysis
-
max time kernel
151s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
11-10-2023 21:09
General
-
Target
bc41efd4e6c8dbd414872a6ac754c2f63e59ae9b2f6232908dcdeff246c8703e.exe
-
Size
7.6MB
-
MD5
093f33e70cc7afbee20042aa84f80c64
-
SHA1
294a26afa8287825f8fd7edef1c7f86f42bef850
-
SHA256
bc41efd4e6c8dbd414872a6ac754c2f63e59ae9b2f6232908dcdeff246c8703e
-
SHA512
3c0d8e4e920135bc9cc52ad2c035ff6115b3cdef67eb2565487f2b00d8b18009358075bdd02650d3fdfd3e867ece278f38f9a1f43f0c39cc6c92c85f1ca4cbcf
-
SSDEEP
196608:dT/hj6fb+7P+77w7WsEehBlMrSPtbBTJh:dT/x+bMEaQehBlgYtNTr
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bc41efd4e6c8dbd414872a6ac754c2f63e59ae9b2f6232908dcdeff246c8703e.exe"C:\Users\Admin\AppData\Local\Temp\bc41efd4e6c8dbd414872a6ac754c2f63e59ae9b2f6232908dcdeff246c8703e.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1856 -s 24242⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 1856 -ip 18561⤵