Analysis
-
max time kernel
142s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
12/02/2024, 09:38
General
-
Target
96d8795ffe1717cf4089bc5b923d3daf.exe
-
Size
757KB
-
MD5
96d8795ffe1717cf4089bc5b923d3daf
-
SHA1
f69cca93cbcab3227136d3fd2bbfe3b2cfbfc336
-
SHA256
213dd28a7ad6ad623baae755cdaca13f3fd335a6f6c9df5df5d7a628fd558b19
-
SHA512
44908f2b176dee7b2719efa2e71989d67f030daa1adea2b5af15c497096bde3655c03d25d3d2f88ae2f6b8986ceceb9a879041018bfe7b892a771d4e32ca83c4
-
SSDEEP
12288:3qcr9sBQzHiMc0usw9E7uTnXBN2p5opOEte9fzz9dunrpONsAozZX1jqJiqMeXnD:a+OYCXbsw9EsG56l0fzZ8rpvASZX1+Jz
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 10 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\96d8795ffe1717cf4089bc5b923d3daf.exe"C:\Users\Admin\AppData\Local\Temp\96d8795ffe1717cf4089bc5b923d3daf.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\setup.exeC:\Users\Admin\AppData\Local\Temp\setup.exe relaunch2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2876 -s 7883⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 2876 -ip 28761⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
757KB
MD596d8795ffe1717cf4089bc5b923d3daf
SHA1f69cca93cbcab3227136d3fd2bbfe3b2cfbfc336
SHA256213dd28a7ad6ad623baae755cdaca13f3fd335a6f6c9df5df5d7a628fd558b19
SHA51244908f2b176dee7b2719efa2e71989d67f030daa1adea2b5af15c497096bde3655c03d25d3d2f88ae2f6b8986ceceb9a879041018bfe7b892a771d4e32ca83c4
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
2.4MB