Analysis

  • max time kernel
    131s
  • max time network
    162s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/11/2023, 20:40

General

  • Target

    f24b3932780ffcb34d388201d2375e4436b8880c794ffd5cf0a2cb55c4b0532c.exe

  • Size

    2.0MB

  • MD5

    a7c144c0efbef94fb9191810f8eae706

  • SHA1

    6927e2ce00a1e34eabb70cc88dfb431294833e2f

  • SHA256

    f24b3932780ffcb34d388201d2375e4436b8880c794ffd5cf0a2cb55c4b0532c

  • SHA512

    8ecbe554f4fb597e53b8d18b0ce0446495d34ecc64f411072741fb39330e2b1daf3f1a96b18be6bfacaa438ad5cd1af294c307ee7beb5c28535c0223644b50f3

  • SSDEEP

    49152:7jIwUYjEVR4O7+ZJ4yVc52vsz4T53XEOC3Z6/zDdeqdqdQv3bgqZVmJc:7jAYjEVR41ZJ4yu5P8T53XEOC3Z4gqdG

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f24b3932780ffcb34d388201d2375e4436b8880c794ffd5cf0a2cb55c4b0532c.exe
    "C:\Users\Admin\AppData\Local\Temp\f24b3932780ffcb34d388201d2375e4436b8880c794ffd5cf0a2cb55c4b0532c.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:876
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 876 -s 700
      2⤵
      • Program crash
      PID:1732
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 876 -ip 876
    1⤵
      PID:4192

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads