fd8228cc83bc4379bba58cc1b4ee8ebb2d9bb408485d9c9fccf44d5f60631492 | Triage

Analysis

max time kernel
150s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
10/03/2024, 12:18

Sharing

Report Analysis Logs

General

Target

be95e59f83045775087cb6bd60efa5a9.exe
Size

86KB
MD5

be95e59f83045775087cb6bd60efa5a9
SHA1

08a3c515975002481b12d49882619359b7d8c028
SHA256

fd8228cc83bc4379bba58cc1b4ee8ebb2d9bb408485d9c9fccf44d5f60631492
SHA512

2850c0f53339b37bafbfeede1d133c3b23d4775f939e9713178d9af3b11eea85bf367a473e97679d9cf571fc46ded55dbe1ccc962b3c42ecbb398616fed84adf
SSDEEP

768:+wgdWg4yp6Hxp/k/J/MkH5DAGo6DrdGsyP+tnK:+o+Mp/klMBh6iP+tK

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4536	1324	WerFault.exe	86

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1324	be95e59f83045775087cb6bd60efa5a9.exe

C:\Users\Admin\AppData\Local\Temp\be95e59f83045775087cb6bd60efa5a9.exe
"C:\Users\Admin\AppData\Local\Temp\be95e59f83045775087cb6bd60efa5a9.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1324
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1324 -s 524
  2⤵
  - Program crash
  PID:4536

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 1324 -ip 1324
1⤵
PID:4632

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads