Analysis
-
max time kernel
27s -
max time network
44s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
24-05-2022 21:15
Static task
static1
Behavioral task
behavioral1
Sample
a0eb7109e4badc86bc659f50b7c45ce18d2ed51c0cb17f7e1655b34e4e6ad09f.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
a0eb7109e4badc86bc659f50b7c45ce18d2ed51c0cb17f7e1655b34e4e6ad09f.exe
Resource
win10v2004-20220414-en
General
-
Target
a0eb7109e4badc86bc659f50b7c45ce18d2ed51c0cb17f7e1655b34e4e6ad09f.exe
-
Size
460KB
-
MD5
73e9e5d8f72d047d7bbe795326b688fb
-
SHA1
a6b02b123f8281f77e7f92579762d5ee991e290c
-
SHA256
a0eb7109e4badc86bc659f50b7c45ce18d2ed51c0cb17f7e1655b34e4e6ad09f
-
SHA512
39feddf90b05ec4256b6d7d0058d87662bba48c9b8aadd605b723f3df92bddf71a4a271d0d9436838b8688339c84aebb7d53fa3c40f081c58004744666620c46
Malware Config
Signatures
-
ReZer0 packer 1 IoCs
Detects ReZer0, a packer with multiple versions used in various campaigns.
Processes:
resource yara_rule behavioral1/memory/284-58-0x00000000041F0000-0x0000000004248000-memory.dmp rezer0
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/284-54-0x0000000000CA0000-0x0000000000D1A000-memory.dmpFilesize
488KB
-
memory/284-55-0x0000000076431000-0x0000000076433000-memory.dmpFilesize
8KB
-
memory/284-56-0x0000000000320000-0x0000000000328000-memory.dmpFilesize
32KB
-
memory/284-57-0x0000000000490000-0x000000000050A000-memory.dmpFilesize
488KB
-
memory/284-58-0x00000000041F0000-0x0000000004248000-memory.dmpFilesize
352KB