Analysis
-
max time kernel
116s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
19/09/2022, 08:18
General
-
Target
50c2dfdf4e6d489c1b2d682bcafa2bf0495c915bcb41b44a4f0b9e16eafd21bc.exe
-
Size
99KB
-
MD5
7505e4261d4d20d2e74451436d9750a4
-
SHA1
95d344d68df55d511cf58eb9072659cdb1e78a51
-
SHA256
50c2dfdf4e6d489c1b2d682bcafa2bf0495c915bcb41b44a4f0b9e16eafd21bc
-
SHA512
a6201505a9c7d41bae92277447a735611b9f255fa7b691a73fe519dd40662e03e652f91ed2c77d66b5df74c5d8494af33dd7e7dd7f7d893218ab38a5ea4d1472
-
SSDEEP
3072:Iwi089AvUB1LZPE1AAQvCTjE/j15AY41C:k0wB1LlyVb+15AYF
Score
8/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Program crash 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\50c2dfdf4e6d489c1b2d682bcafa2bf0495c915bcb41b44a4f0b9e16eafd21bc.exe"C:\Users\Admin\AppData\Local\Temp\50c2dfdf4e6d489c1b2d682bcafa2bf0495c915bcb41b44a4f0b9e16eafd21bc.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5004 -s 6082⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 5004 -ip 50041⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
256KB
-
Filesize
92KB
-
Filesize
256KB
-
Filesize
92KB