Analysis
-
max time kernel
143s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
25-12-2023 15:28
General
-
Target
295f5430b6cfcb5a5aa397b6363c1ab9.exe
-
Size
219KB
-
MD5
295f5430b6cfcb5a5aa397b6363c1ab9
-
SHA1
b21b98ad47988d535c1ca3d9aea43d201d4fb0bb
-
SHA256
79fcbbbb0132e4661af3976531dc5c226e33e4eeb2534aae3185e37c07f5ef2a
-
SHA512
68d739c93692705453634ee07ca3e5798f294b299659d8466dca1dd8dd68ce11a4da8bdf08c5a62ca8672ad1aa172290da90fa114858cc3a3af084cf7cb4e585
-
SSDEEP
6144:dnoRzcGysujqVDFMqGFeoGbKWDVr/RuJYOKhH/T:BwcHsuwSpFHG2WDV5OKhfT
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\295f5430b6cfcb5a5aa397b6363c1ab9.exe"C:\Users\Admin\AppData\Local\Temp\295f5430b6cfcb5a5aa397b6363c1ab9.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1196 -s 5962⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 1196 -ip 11961⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
316KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
8KB
-
Filesize
316KB
-
Filesize
340KB