3b2cfb4b4440770a938352cd8f30bb9be777f8040e2fc35a4589e98ecd30348d | Triage

Analysis

max time kernel
149s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
29/12/2023, 23:32

Sharing

Report Analysis Logs

General

Target

0702ab5eaae45ed46a74fb9b3ed99197.exe
Size

100KB
MD5

0702ab5eaae45ed46a74fb9b3ed99197
SHA1

190a167f2841f8432fffe36a1714f1c98c4550cf
SHA256

3b2cfb4b4440770a938352cd8f30bb9be777f8040e2fc35a4589e98ecd30348d
SHA512

35d1ce56cc0aaf621de7333eb0b25b2039f656da107b8d517aebb6bc2a829c7835ea876597cac2da1b12bb11a7999608c70b69b472f087743c487a12ecede6d1
SSDEEP

1536:dptGm82NTzwCHMGAc4ohrPXo+73Rez8b0SyuNIjnZq:BwXurPX7CuCnY

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2224	1324	WerFault.exe	88

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1324	0702ab5eaae45ed46a74fb9b3ed99197.exe

C:\Users\Admin\AppData\Local\Temp\0702ab5eaae45ed46a74fb9b3ed99197.exe
"C:\Users\Admin\AppData\Local\Temp\0702ab5eaae45ed46a74fb9b3ed99197.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1324
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1324 -s 464
  2⤵
  - Program crash
  PID:2224

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 1324 -ip 1324
1⤵
PID:3868

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads