Analysis

  • max time kernel
    142s
  • max time network
    106s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/12/2023, 11:26

General

  • Target

    7d9032b9828937547f44e7c62431252aaa402018bb405548e8a32e1f40b58bf6.exe

  • Size

    88KB

  • MD5

    7665528dc374c532e998fcd4a1df8fea

  • SHA1

    c1770c0bb2da037e8beac512f089e1a7f16ebcf7

  • SHA256

    7d9032b9828937547f44e7c62431252aaa402018bb405548e8a32e1f40b58bf6

  • SHA512

    31ab48b8954e1b31aac06aafa97e981bb469fc8802f72aa8643dc65556e47bcf431b691d9ce95feef31be0b0b1adf0b9032148263d3f44e3aade7d5a0c1690e9

  • SSDEEP

    768:ma+BTbHWdmXL8Aj5mlSI9CFcOvvgggUUUBzUKgW39xNQNwrBZzW3JZWXHtRpnVKJ:R+x0mXL8ApEAhj3C1u4

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7d9032b9828937547f44e7c62431252aaa402018bb405548e8a32e1f40b58bf6.exe
    "C:\Users\Admin\AppData\Local\Temp\7d9032b9828937547f44e7c62431252aaa402018bb405548e8a32e1f40b58bf6.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1600
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 1600 -s 756
      2⤵
      • Program crash
      PID:2460
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 1600 -ip 1600
    1⤵
      PID:1472

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads