Resubmissions

23/09/2022, 04:22

220923-ezlrtsdbc2 3

23/09/2022, 04:21

220923-eyx4gadbb9 3

Analysis

  • max time kernel
    91s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/09/2022, 04:21

General

  • Target

    Spytify.exe

  • Size

    1.1MB

  • MD5

    ca40952963e976b10c6c6b0fbc4ba043

  • SHA1

    fd7f3f42e0c94e5d3dc985c3aac9d6c2ac30073c

  • SHA256

    6ac7636066bda5b103e73d9e53fd9f5efb587163ebea6c48b3f9377ad28ceccb

  • SHA512

    8bca02789dae91fd04a26aa50f0abe192fb17d93d52d2e869bb9096b96895174985c4e28ef3da5ef90bc40da81011c24cce8c49b804bc2a6de943a9ad65cd647

  • SSDEEP

    6144:lotULhuDrMhr/39FwChM+nwlowp7lwGJg0IbJ3oZZmRwisCi1BexJoCi1BaWJfu9:lowrnNFiEnVfJB2futUnCVNhlFpxjfr

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Spytify.exe
    "C:\Users\Admin\AppData\Local\Temp\Spytify.exe"
    1⤵
      PID:2640
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 2640 -s 700
        2⤵
        • Program crash
        PID:1764
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 208 -p 2640 -ip 2640
      1⤵
        PID:5008
      • C:\Windows\System32\WScript.exe
        "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Desktop\LockRequest.vbs"
        1⤵
          PID:456

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2640-132-0x00007FFB62800000-0x00007FFB632C1000-memory.dmp

          Filesize

          10.8MB

        • memory/2640-133-0x000001AE74040000-0x000001AE74152000-memory.dmp

          Filesize

          1.1MB

        • memory/2640-134-0x00007FFB62800000-0x00007FFB632C1000-memory.dmp

          Filesize

          10.8MB