fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b

Analysis

max time kernel
240s
max time network
274s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
13-10-2023 22:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
Size

4.8MB
MD5

e93d907cae83c1f3a1d721f09835a7ef
SHA1

4e1ea64540f3ee1de2b62356b0a19a7f3f94a0cb
SHA256

fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b
SHA512

4c6da4684fbba350b7b2504bd1acffd9bb39efb6091cd6326bbd2579868da7cde8c4fe746724eed02d82ce998c9a6b993dbfb54e914bd5604b363b9416a3314b
SSDEEP

98304:DtWHJOc0fbD5nSSyqIW++Cbc0vpcyBd6Mb6w/5b5l4bXJFbJ:DS6X4SyqIz+CEyBd6Mbf/5mXJRJ

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2216	3456	WerFault.exe	83

Suspicious behavior: EnumeratesProcesses 26 IoCs

pid	Process
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3456 wrote to memory of 2216	3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe	87
PID 3456 wrote to memory of 2216	3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe	87
PID 3456 wrote to memory of 2216	3456	fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe	87

C:\Users\Admin\AppData\Local\Temp\fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe
"C:\Users\Admin\AppData\Local\Temp\fa3a9ae0449e2cc4eb6dace4f6bab75fcb4e9b82347d860514ff34063a70d55b.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3456
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3456 -s 940
  2⤵
  - Program crash
  PID:2216

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads