243d5d6b652d79082d636678a5f57c9fc2390894cc55588a27e5a11753f1f82c | Triage

Analysis

max time kernel
132s
max time network
166s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
19/12/2023, 10:35

Sharing

Report Analysis Logs

General

Target

08dbd6dc24d0fe7cfaa1587b0ca48722.exe
Size

86KB
MD5

08dbd6dc24d0fe7cfaa1587b0ca48722
SHA1

92b92c9baa78022ac37c58cfc2ac0cc9164c6425
SHA256

243d5d6b652d79082d636678a5f57c9fc2390894cc55588a27e5a11753f1f82c
SHA512

0c5abbb621c35623968dbc0eb6276cf0769462487b141c8949becd80f8cf6f496150446ed0ec1c7914d6a50648b8015ef9522bd6c8c1fb46233eebc67ed57754
SSDEEP

768:sxbY9bIGXIu4Q/bI0/F/NstMlwQTOxelNmw5jRF9RSM:sxBG4uBIUJxdlNmKjRFv

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
888	4972	WerFault.exe	88

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4972	08dbd6dc24d0fe7cfaa1587b0ca48722.exe

C:\Users\Admin\AppData\Local\Temp\08dbd6dc24d0fe7cfaa1587b0ca48722.exe
"C:\Users\Admin\AppData\Local\Temp\08dbd6dc24d0fe7cfaa1587b0ca48722.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4972
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4972 -s 548
  2⤵
  - Program crash
  PID:888

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4972 -ip 4972
1⤵
PID:2392

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads