Analysis
-
max time kernel
142s -
max time network
106s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2023, 11:26
Static task
static1
Behavioral task
behavioral1
Sample
7d9032b9828937547f44e7c62431252aaa402018bb405548e8a32e1f40b58bf6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7d9032b9828937547f44e7c62431252aaa402018bb405548e8a32e1f40b58bf6.exe
Resource
win10v2004-20231215-en
General
-
Target
7d9032b9828937547f44e7c62431252aaa402018bb405548e8a32e1f40b58bf6.exe
-
Size
88KB
-
MD5
7665528dc374c532e998fcd4a1df8fea
-
SHA1
c1770c0bb2da037e8beac512f089e1a7f16ebcf7
-
SHA256
7d9032b9828937547f44e7c62431252aaa402018bb405548e8a32e1f40b58bf6
-
SHA512
31ab48b8954e1b31aac06aafa97e981bb469fc8802f72aa8643dc65556e47bcf431b691d9ce95feef31be0b0b1adf0b9032148263d3f44e3aade7d5a0c1690e9
-
SSDEEP
768:ma+BTbHWdmXL8Aj5mlSI9CFcOvvgggUUUBzUKgW39xNQNwrBZzW3JZWXHtRpnVKJ:R+x0mXL8ApEAhj3C1u4
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2460 1600 WerFault.exe 14 -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1600 7d9032b9828937547f44e7c62431252aaa402018bb405548e8a32e1f40b58bf6.exe 1600 7d9032b9828937547f44e7c62431252aaa402018bb405548e8a32e1f40b58bf6.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\7d9032b9828937547f44e7c62431252aaa402018bb405548e8a32e1f40b58bf6.exe"C:\Users\Admin\AppData\Local\Temp\7d9032b9828937547f44e7c62431252aaa402018bb405548e8a32e1f40b58bf6.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:1600 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1600 -s 7562⤵
- Program crash
PID:2460
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 1600 -ip 16001⤵PID:1472