Analysis

  • max time kernel
    154s
  • max time network
    184s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03-10-2022 23:20

General

  • Target

    fae8076f0cbd04b4a22b220538419c1ea7e1b251504592d8daccd01bc9612918.exe

  • Size

    17KB

  • MD5

    6712a5f017ae300b92d4fd121bd5acf6

  • SHA1

    899b050fb554af6ad905bec664d41f12ed095870

  • SHA256

    fae8076f0cbd04b4a22b220538419c1ea7e1b251504592d8daccd01bc9612918

  • SHA512

    2eb62f064ecb7f30e55ad438603838456f959e5bca7da6c8e84e194f94ae624cab49ee251c14362e68df57b4ac5ddd32c23cb03c650090bcbeefbb049839ca41

  • SSDEEP

    384:A3OSsNr8P5rhlK9R51EI2bNHfwQf6wSnUeXQfP4Rg:Wep8PlPuGoUbP7

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fae8076f0cbd04b4a22b220538419c1ea7e1b251504592d8daccd01bc9612918.exe
    "C:\Users\Admin\AppData\Local\Temp\fae8076f0cbd04b4a22b220538419c1ea7e1b251504592d8daccd01bc9612918.exe"
    1⤵
      PID:3952
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3952 -s 284
        2⤵
        • Program crash
        PID:4924
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3952 -ip 3952
      1⤵
        PID:4940

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3952-132-0x0000000000400000-0x000000000040B000-memory.dmp

        Filesize

        44KB