Analysis

  • max time kernel
    27s
  • max time network
    44s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    24-05-2022 21:15

General

  • Target

    a0eb7109e4badc86bc659f50b7c45ce18d2ed51c0cb17f7e1655b34e4e6ad09f.exe

  • Size

    460KB

  • MD5

    73e9e5d8f72d047d7bbe795326b688fb

  • SHA1

    a6b02b123f8281f77e7f92579762d5ee991e290c

  • SHA256

    a0eb7109e4badc86bc659f50b7c45ce18d2ed51c0cb17f7e1655b34e4e6ad09f

  • SHA512

    39feddf90b05ec4256b6d7d0058d87662bba48c9b8aadd605b723f3df92bddf71a4a271d0d9436838b8688339c84aebb7d53fa3c40f081c58004744666620c46

Score
9/10

Malware Config

Signatures

  • ReZer0 packer 1 IoCs

    Detects ReZer0, a packer with multiple versions used in various campaigns.

Processes

  • C:\Users\Admin\AppData\Local\Temp\a0eb7109e4badc86bc659f50b7c45ce18d2ed51c0cb17f7e1655b34e4e6ad09f.exe
    "C:\Users\Admin\AppData\Local\Temp\a0eb7109e4badc86bc659f50b7c45ce18d2ed51c0cb17f7e1655b34e4e6ad09f.exe"
    1⤵
      PID:284

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/284-54-0x0000000000CA0000-0x0000000000D1A000-memory.dmp
      Filesize

      488KB

    • memory/284-55-0x0000000076431000-0x0000000076433000-memory.dmp
      Filesize

      8KB

    • memory/284-56-0x0000000000320000-0x0000000000328000-memory.dmp
      Filesize

      32KB

    • memory/284-57-0x0000000000490000-0x000000000050A000-memory.dmp
      Filesize

      488KB

    • memory/284-58-0x00000000041F0000-0x0000000004248000-memory.dmp
      Filesize

      352KB