Analysis
-
max time kernel
142s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
24/10/2023, 13:29
General
-
Target
ab5b504dc61670433fd3daf252a41629f76f8e0efa5e6d532a721ef5c353ea4c.exe
-
Size
2.0MB
-
MD5
4b1aa4e084c4ad7f76d0c52f6f737209
-
SHA1
ede35fe5c21b09f11b985a302608f3c2d8830078
-
SHA256
ab5b504dc61670433fd3daf252a41629f76f8e0efa5e6d532a721ef5c353ea4c
-
SHA512
502823a7018162c747ade020d1c4308efaa65d3bd8e5500fef30df04c8a504bb6ddbda350047526ec6514155891211fa95d6cbfaf24c704db73daf4b6378d8c5
-
SSDEEP
49152:bdpUdmV/9PGiFxogyX+s8KuqGaX0ToIBAUZLYm:wdQ/9PtFxJJBAUZLJ
Score
7/10
Malware Config
Signatures
-
UPX packed file 28 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ab5b504dc61670433fd3daf252a41629f76f8e0efa5e6d532a721ef5c353ea4c.exe"C:\Users\Admin\AppData\Local\Temp\ab5b504dc61670433fd3daf252a41629f76f8e0efa5e6d532a721ef5c353ea4c.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5108 -s 11602⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 5108 -ip 51081⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
44KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
44KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
44KB