7e0c0805e0e43fef8425aab04958599191addd749aa384fe8a9f36f0228126a2 | Triage

Analysis

max time kernel
136s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
26/12/2023, 00:15

Sharing

Report Analysis Logs

General

Target

45a4443d7136d12ceb0e379bff4505e5.exe
Size

72KB
MD5

45a4443d7136d12ceb0e379bff4505e5
SHA1

4a1b521a8ed7f47063436dc772204431dc98b0c2
SHA256

7e0c0805e0e43fef8425aab04958599191addd749aa384fe8a9f36f0228126a2
SHA512

d61064f3dc608af00aa664b1c17260a667dd39723892b48166d2643bf986761ff8b9772655257f24ebf3f02ea73f050d2fd25cee80d640b4c6098e226b203053
SSDEEP

1536:vu+hjRou5tGEK9cuYtWhiuRxYnc8O+jnLik4:vu+WhiuRxYcsnr4

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1564	2612	WerFault.exe	15

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2612	45a4443d7136d12ceb0e379bff4505e5.exe

C:\Users\Admin\AppData\Local\Temp\45a4443d7136d12ceb0e379bff4505e5.exe
"C:\Users\Admin\AppData\Local\Temp\45a4443d7136d12ceb0e379bff4505e5.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2612
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2612 -s 752
  2⤵
  - Program crash
  PID:1564

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2612 -ip 2612
1⤵
PID:3504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads