Overview

overview

8

Static

static

8

c34ab1ff49...1c.exe

windows7-x64

8

c34ab1ff49...1c.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    91s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/10/2022, 21:46

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    c34ab1ff49fe56719c223462c5e65049231567a5f919728b35edc2211cfc321c.exe

  • Size

    54KB

  • MD5

    9204c4b25c1a2c35e1d46d6cc3cde8b0

  • SHA1

    959d00e82226f4ede3e2ce354a5a71ebeed229cb

  • SHA256

    c34ab1ff49fe56719c223462c5e65049231567a5f919728b35edc2211cfc321c

  • SHA512

    6fdbae026bfe3be21e6618d0b1b36bdbb3a88af9338141d5b1ccd12788e0ccdd9ad1912eaa2daa2cf65bd50c3593845f6da02490db3dcd9c5aa5e5c786562cbe

  • SSDEEP

    768:2ea3/Ln9fn89rQxtUwLYLrHGbzCH7nUKfiVIVXAt2rh1usAea8kIRfQK1UdManHv:2eyDn9nZUMoBUw/wt2gxefQKamaHjL

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c34ab1ff49fe56719c223462c5e65049231567a5f919728b35edc2211cfc321c.exe
    "C:\Users\Admin\AppData\Local\Temp\c34ab1ff49fe56719c223462c5e65049231567a5f919728b35edc2211cfc321c.exe"
    1⤵
      PID:636
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 636 -s 472
        2⤵
        • Program crash
        PID:1180
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 636 -ip 636
      1⤵
        PID:2320

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/636-132-0x0000000000400000-0x0000000000423000-memory.dmp

              Filesize

              140KB

              Download