Analysis
-
max time kernel
92s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
02-02-2024 16:21
General
-
Target
89fa3437958174c5e3e329ffb4c17037.exe
-
Size
38KB
-
MD5
89fa3437958174c5e3e329ffb4c17037
-
SHA1
4ee10e0ea9faf19b8b0b3458818170ae947794cd
-
SHA256
08de190600753439bea7a6aa08a0861159501b9a8e620dbc50c508357b0ebbfb
-
SHA512
4e1a82e61f8df5508bd9b4e8f89d024e3d6dbee9c44ac95e457eb91b21ed081889460465f3452ef7e7b5276bbde497deee3e7785b7663d781bfa24cf6cb013c1
-
SSDEEP
768:AjKtO6noiqLMh+mPQvVN9bud/S3uQquBM+pGA1QZL:AAZSLMFQtNIBQqoGA1QZL
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 8 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\89fa3437958174c5e3e329ffb4c17037.exe"C:\Users\Admin\AppData\Local\Temp\89fa3437958174c5e3e329ffb4c17037.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\89fa3437958174c5e3e329ffb4c17037.exe"C:\Users\Admin\AppData\Local\Temp\89fa3437958174c5e3e329ffb4c17037.exe"2⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3404 -s 123⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3404 -ip 34041⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
24KB