f4054cff11bed4262ce7f99fd3cb69c3358102cf3543ddc4428742b73745fde9

Analysis

max time kernel
1s
max time network
5s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
11/10/2022, 07:32

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\HRSword-main\Drivers\hrwfpdrv.exe command="C:\Users\Admin\AppData\Local\Temp\HRSword-main\Drivers\hrwfpdrv.exe" wdir=C:\Users\Admin\AppData\Local\Temp\HRSword-main\Drivers Payload error: The %1 application cannot be run in Win32 mode.

General

Target
HRSword-main/Drivers/hrwfpdrv.exe
Size 114KB
Sample221011-jc4rcacdfk
SHA256 b09c9751ac0151d06d9dc39caf35cee7f07457867c9f23dac164bf830a498681
MD5 a1046e14d0b388304b55d36898665d96
SHA1 ccc5a579a58a0ab730d168caaafee98827fd8cfd
SHA512 067e312457b2885593a756d96907c7173aaf61389ea58a21049697ac23dbf45c254f11455dd22b9428731c07de068eb39a7f2c36c0a3087b6f51b7071107b95d
SSDEEP 3072:7usLCBAkordKZExYaPNKumDwb8Z9XRvjlDCk:7usLPY+kUwZRRJ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\HRSword-main\Drivers\hrwfpdrv.exe
"C:\Users\Admin\AppData\Local\Temp\HRSword-main\Drivers\hrwfpdrv.exe"
1⤵
PID:3028

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads