Analysis
-
max time kernel
146s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
25/12/2023, 23:38
General
-
Target
43c4dfa115a1ca491c400ade5f1d9c6c.exe
-
Size
868KB
-
MD5
43c4dfa115a1ca491c400ade5f1d9c6c
-
SHA1
7e609d73e7d5ea4ca16179066b793248af343c9f
-
SHA256
e1a92a6033986ebcc1838f06a1bf927dcc7362bac071a365e91e00c9fafdbec3
-
SHA512
aa3ba32962a9612e2abdc4d104f825c8e675eb922c18c03c7cbe39b1eb749b4b74c03b1691253807f2f1192edfefe61f4af048996a55584978a8258ac780b96c
-
SSDEEP
12288:RRf2+wmjFPKe0Dm7l4WaXAIcd2nHC1/SMZoSmrzUs7Nl:RRf5jeUldaXAbd2nHCQMWIul
Score
7/10
Malware Config
Signatures
-
UPX packed file 28 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Program crash 2 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\43c4dfa115a1ca491c400ade5f1d9c6c.exe"C:\Users\Admin\AppData\Local\Temp\43c4dfa115a1ca491c400ade5f1d9c6c.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 400 -s 8642⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 400 -s 8642⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 400 -ip 4001⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 400 -ip 4001⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB