f21b38c7b01b6f75aa89fc939b38871249f330739f030fcbe6ca6e1a3f19ee9a | Triage

Analysis

max time kernel
133s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
14-03-2024 02:48

Sharing

Report Analysis Logs

General

Target

c77d48b2a410b1c15d0aac1cc13f33a5.exe
Size

24KB
MD5

c77d48b2a410b1c15d0aac1cc13f33a5
SHA1

3a8d2a3ab8813289b41af4e070d3fff78a2b105a
SHA256

f21b38c7b01b6f75aa89fc939b38871249f330739f030fcbe6ca6e1a3f19ee9a
SHA512

92009d4ea6cf7374d154d8094b40f2b37a020c81d9fcd5781761cb1ff1fff42019e22cc1e84d2cf24b6d47c5473c111f81c2187964b133f3619508660885ef83
SSDEEP

192:NUR1EPAsqwJxaEvGXh5lHWbZxJbZLP1oyn0prrnKkeMkj:KEoAzanhHa1aprDt

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4516	c77d48b2a410b1c15d0aac1cc13f33a5.exe
4516	c77d48b2a410b1c15d0aac1cc13f33a5.exe

C:\Users\Admin\AppData\Local\Temp\c77d48b2a410b1c15d0aac1cc13f33a5.exe
"C:\Users\Admin\AppData\Local\Temp\c77d48b2a410b1c15d0aac1cc13f33a5.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4516

C:\Windows\system32\WerFault.exe
"C:\Windows\system32\WerFault.exe" -k -lc NDIS NDIS-20240314-0250.dmp
1⤵
PID:1104

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads