8f0a0d06eeeadc0473feaf0b4796827f44727173e3d0643aac5410ec0bf85810 | Triage

Analysis

max time kernel
93s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
27/01/2024, 21:32

Sharing

Report Analysis Logs

General

Target

7b54c0d4fb1f1f920d897dbbdc6d9b9b.exe
Size

272KB
MD5

7b54c0d4fb1f1f920d897dbbdc6d9b9b
SHA1

a6b12bc635670f09540a9fc72d90d814441ca3ef
SHA256

8f0a0d06eeeadc0473feaf0b4796827f44727173e3d0643aac5410ec0bf85810
SHA512

3ebf8da4cd03c00d9012f630ff760eb947c002af55b880878da23640cc842f70a153ddaa48247902876f0bae0b72ae47d027bd34e20376caa371bcbdf10b0e85
SSDEEP

6144:FLaOlQxchRdjLmtrBuMrdekUH63u+X5sc573:krxGLTuPL5j

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4884	220	WerFault.exe	53

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
220	7b54c0d4fb1f1f920d897dbbdc6d9b9b.exe

C:\Users\Admin\AppData\Local\Temp\7b54c0d4fb1f1f920d897dbbdc6d9b9b.exe
"C:\Users\Admin\AppData\Local\Temp\7b54c0d4fb1f1f920d897dbbdc6d9b9b.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:220
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 220 -s 464
  2⤵
  - Program crash
  PID:4884

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 220 -ip 220
1⤵
PID:4580

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads