Analysis
-
max time kernel
152s -
max time network
172s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
25/12/2023, 13:42
General
-
Target
2298a56f068839ff4249a3c03bd52471.exe
-
Size
1.3MB
-
MD5
2298a56f068839ff4249a3c03bd52471
-
SHA1
04b45e5b590f7a3420baec96bdb7e6af8043cb23
-
SHA256
1e17fe3d38e958aec76cf4a0dba34edc6d517cf6ab631ae69c76a708aa5e1e1b
-
SHA512
9830f3048019ed23a7fcd74fb3836e27eed1f7487dfbf002b325b9cf8eb59f8eb0b930fbb2ea8d0feedeafa14d0466d326cf83f7b3de195616b3da97bc3de52b
-
SSDEEP
24576:tpyhP5RFFrSEyFPu8JR9ksaQFCLwbLflBPF:KyFPu8D9k5QELuLt
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
-
Suspicious use of WriteProcessMemory 10 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2298a56f068839ff4249a3c03bd52471.exe"C:\Users\Admin\AppData\Local\Temp\2298a56f068839ff4249a3c03bd52471.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\2298a56f068839ff4249a3c03bd52471.exe2⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1404 -s 19163⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 1404 -ip 14041⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
864KB
-
Filesize
864KB
-
Filesize
864KB
-
Filesize
864KB
-
Filesize
864KB
-
Filesize
864KB
-
Filesize
864KB
-
Filesize
864KB