8e29f82d96a195e72c9bc253f933f9f255a93ed59665dd109ddf566e0da7a425 | Triage

Analysis

max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
30/12/2023, 01:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

0abffb76596df81742abdca02879be7c.exe
Size

7KB
MD5

0abffb76596df81742abdca02879be7c
SHA1

65b3fd9efbbafe67561d53539d0bf2ddfd1113c1
SHA256

8e29f82d96a195e72c9bc253f933f9f255a93ed59665dd109ddf566e0da7a425
SHA512

806a77bb6811b893141a251b7689fe16771a12c4692c79648e4e9e499625ea7a81f33984d16b78d0c59680f4f0739de0a487429bdb949319a388187797b9beaf
SSDEEP

192:4GHGFGebsOlJ6gO+EI15mxmCOvFqmKaWJr1gVc+:4yQtCgBCvVgc+

Score

5^/10

Malware Config

Signatures

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 540 set thread context of 2232	540	0abffb76596df81742abdca02879be7c.exe	108

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1932	2232	WerFault.exe	108

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 540 wrote to memory of 2232	540	0abffb76596df81742abdca02879be7c.exe	108
PID 540 wrote to memory of 2232	540	0abffb76596df81742abdca02879be7c.exe	108
PID 540 wrote to memory of 2232	540	0abffb76596df81742abdca02879be7c.exe	108
PID 540 wrote to memory of 2232	540	0abffb76596df81742abdca02879be7c.exe	108

C:\Users\Admin\AppData\Local\Temp\0abffb76596df81742abdca02879be7c.exe
"C:\Users\Admin\AppData\Local\Temp\0abffb76596df81742abdca02879be7c.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:540
- C:\Windows\SysWOW64\explorer.exe
  explorer.exe
  2⤵
  PID:2232
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2232 -s 732
    3⤵
    - Program crash
    PID:1932

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2232 -ip 2232
1⤵
PID:2208

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads