d55ddbca0b7e23b471cd4e86a771583bbb6d8bd1f1a1bdc64db6431a44ed6cba | Triage

Analysis

max time kernel
93s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
13/07/2024, 06:26

Sharing

Report Analysis Logs

General

Target

5c0fd2907879e3bfc7e88e4f2ffc40f0N.exe
Size

184KB
MD5

5c0fd2907879e3bfc7e88e4f2ffc40f0
SHA1

7f7ff320e427a441baa5ab27bdf32263b317c981
SHA256

d55ddbca0b7e23b471cd4e86a771583bbb6d8bd1f1a1bdc64db6431a44ed6cba
SHA512

00a72a8eefb8c4a4e89d121ca402a657650a087daac100d6b35a451b8ce05dfb96470379d934b07afae53570d3652273cf1350d36b13f0915934ec7fcaa4ecfb
SSDEEP

3072:otPLHSKrYUlPd0AtNUtzWvEnlvnqeviu:otOK110AEz8EnlPqeviu

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
840	4812	WerFault.exe	82

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4812	5c0fd2907879e3bfc7e88e4f2ffc40f0N.exe

C:\Users\Admin\AppData\Local\Temp\5c0fd2907879e3bfc7e88e4f2ffc40f0N.exe
"C:\Users\Admin\AppData\Local\Temp\5c0fd2907879e3bfc7e88e4f2ffc40f0N.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4812
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4812 -s 720
  2⤵
  - Program crash
  PID:840

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4812 -ip 4812
1⤵
PID:2808

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads