Analysis
-
max time kernel
131s -
max time network
162s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
06/11/2023, 20:40
Static task
static1
Behavioral task
behavioral1
Sample
f24b3932780ffcb34d388201d2375e4436b8880c794ffd5cf0a2cb55c4b0532c.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
f24b3932780ffcb34d388201d2375e4436b8880c794ffd5cf0a2cb55c4b0532c.exe
Resource
win10v2004-20231023-en
General
-
Target
f24b3932780ffcb34d388201d2375e4436b8880c794ffd5cf0a2cb55c4b0532c.exe
-
Size
2.0MB
-
MD5
a7c144c0efbef94fb9191810f8eae706
-
SHA1
6927e2ce00a1e34eabb70cc88dfb431294833e2f
-
SHA256
f24b3932780ffcb34d388201d2375e4436b8880c794ffd5cf0a2cb55c4b0532c
-
SHA512
8ecbe554f4fb597e53b8d18b0ce0446495d34ecc64f411072741fb39330e2b1daf3f1a96b18be6bfacaa438ad5cd1af294c307ee7beb5c28535c0223644b50f3
-
SSDEEP
49152:7jIwUYjEVR4O7+ZJ4yVc52vsz4T53XEOC3Z6/zDdeqdqdQv3bgqZVmJc:7jAYjEVR41ZJ4yu5P8T53XEOC3Z4gqdG
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1732 876 WerFault.exe 55 -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 876 f24b3932780ffcb34d388201d2375e4436b8880c794ffd5cf0a2cb55c4b0532c.exe 876 f24b3932780ffcb34d388201d2375e4436b8880c794ffd5cf0a2cb55c4b0532c.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\f24b3932780ffcb34d388201d2375e4436b8880c794ffd5cf0a2cb55c4b0532c.exe"C:\Users\Admin\AppData\Local\Temp\f24b3932780ffcb34d388201d2375e4436b8880c794ffd5cf0a2cb55c4b0532c.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:876 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 876 -s 7002⤵
- Program crash
PID:1732
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 876 -ip 8761⤵PID:4192