Analysis
-
max time kernel
78s -
max time network
132s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
19/09/2022, 13:50
General
-
Target
8187cdbec517a781e851e4b00fd699473db516a124aa321adf1bd226438cf0f6.exe
-
Size
288KB
-
MD5
58567e0b2e63acd97256ec162b66ca11
-
SHA1
aa12d97846767e5ec62d6e392816658a9ab262a8
-
SHA256
8187cdbec517a781e851e4b00fd699473db516a124aa321adf1bd226438cf0f6
-
SHA512
e57bc54b44a39706efee5c7c4e4ae5bc669dcac05e684475e92bd0c811e42ea004d222d8ab7c2c2c0de999915b90f8f99cef866acee962059614d503a2184170
-
SSDEEP
6144:41n/hpAGsezcvw4idyV902KUc+xEdgy88g8WhH0jc8cv7mg8:4fOGsGcvGd80LqEdrOH0jPB
Score
8/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Program crash 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8187cdbec517a781e851e4b00fd699473db516a124aa321adf1bd226438cf0f6.exe"C:\Users\Admin\AppData\Local\Temp\8187cdbec517a781e851e4b00fd699473db516a124aa321adf1bd226438cf0f6.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3400 -s 5362⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3400 -s 5562⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 3400 -ip 34001⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 3400 -ip 34001⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
396KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
396KB