Analysis
-
max time kernel
144s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30-12-2023 11:10
Static task
static1
Behavioral task
behavioral1
Sample
66466081333b4eb700d24c04c3d08491b333640e147b22f4db9fabc9ab3dcbb5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
66466081333b4eb700d24c04c3d08491b333640e147b22f4db9fabc9ab3dcbb5.exe
Resource
win10v2004-20231215-en
General
-
Target
66466081333b4eb700d24c04c3d08491b333640e147b22f4db9fabc9ab3dcbb5.exe
-
Size
3.3MB
-
MD5
10438b1b659957c39e0ce2d4dd03a7b9
-
SHA1
4c08f8ae3b77e3246201a1134706dee00f298747
-
SHA256
66466081333b4eb700d24c04c3d08491b333640e147b22f4db9fabc9ab3dcbb5
-
SHA512
a0b004207b82ae0ff68a03fd823f199eda496fa0ca7e4d234e3ee00c0eb1e032441ffa72a15a34d6607a1ef9596bc1e4f06688bd795bf108b260baec65a735f2
-
SSDEEP
98304:UlITQ6jhmFEA1CcDBWzcdEK3teVV0RHe909ERY9k4OiZrq1DfPHNADtV6v+m:uZFp1C2EK3teE9ERY9k4O7NADtV6v+m
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 396 3180 WerFault.exe 16 -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3180 66466081333b4eb700d24c04c3d08491b333640e147b22f4db9fabc9ab3dcbb5.exe 3180 66466081333b4eb700d24c04c3d08491b333640e147b22f4db9fabc9ab3dcbb5.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\66466081333b4eb700d24c04c3d08491b333640e147b22f4db9fabc9ab3dcbb5.exe"C:\Users\Admin\AppData\Local\Temp\66466081333b4eb700d24c04c3d08491b333640e147b22f4db9fabc9ab3dcbb5.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:3180 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3180 -s 14922⤵
- Program crash
PID:396
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3180 -ip 31801⤵PID:3636