Analysis
-
max time kernel
146s -
max time network
167s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
26-12-2023 08:11
General
-
Target
5eb8b9f1319f292ba56d4bdd7aca6443.exe
-
Size
372KB
-
MD5
5eb8b9f1319f292ba56d4bdd7aca6443
-
SHA1
eaa0e54891ad885e91e3b3970b32a7bacfdea9c3
-
SHA256
86351e5896c2470f511e56539e0c486bd8e08a350d93c426e3043adf35b63fd3
-
SHA512
dfa9b121d800d644ac9cd67d40f743e7a9273c41abe8515e5f72104c6f678369c49f178ad0e54abf48ac108acfd7be11b5fc2ecaa8986c21c738b49b53e8efe5
-
SSDEEP
6144:6oRBN7rCXDteZ18GzEXIBGKjxqbfygVpGDjwj4vZKxW7qmpEXuIIc/SpzWJgpJDo:6ovN7rCX5s18J4Y1Dj4vZ4PpEcap6Un
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Drops file in System32 directory 1 IoCs
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5eb8b9f1319f292ba56d4bdd7aca6443.exe"C:\Users\Admin\AppData\Local\Temp\5eb8b9f1319f292ba56d4bdd7aca6443.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3208 -s 7722⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3208 -ip 32081⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
320KB
MD5ca55b5b1b1b8d1da33f8a130d2a5495f
SHA1583a890f462c8668137311995271cfb0a15e4106
SHA256a935440f1c09c391547febf9d9492306b9dc7585c5260e3eaca238b5abc8c116
SHA5123613df17146b3243a7cf63a1c9892ee2d4a7da350242f4d3eda40866d81407eb0002fe9ab099adbed1d80ba9643c27849a892af8796c0eeaa4b558dfd7c4cf42
-
Filesize
72KB
-
Filesize
400KB
-
Filesize
400KB
-
Filesize
108KB
-
Filesize
400KB
-
Filesize
400KB