Analysis

  • max time kernel
    89s
  • max time network
    105s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/10/2022, 23:01 UTC

General

  • Target

    4521cbde8a1518519596ae62606bd43ac2b5c0fdbcb3d77edeb0b259c89797ff.exe

  • Size

    85KB

  • MD5

    9218e08773434341fe20b040dd9a8820

  • SHA1

    36a85a36eadcc911fec8669c4dd87d27874a7cb0

  • SHA256

    4521cbde8a1518519596ae62606bd43ac2b5c0fdbcb3d77edeb0b259c89797ff

  • SHA512

    66cad9269892dabb1e57494542cd79d5c3188beec90272f4e45fef7cc110e2364b30e5693984b133aa52015ecc49f4f6f005ddf0efc3070e7d78dc4d7fea71ae

  • SSDEEP

    1536:GBShuAZlL6aHqzaeEXw1Lm0YIzDLXudZ3UdbgOcZytTLFO0IY2VoC8hO:h7v3HqGKtm0nLXM5hOwmTZG3iC8o

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4521cbde8a1518519596ae62606bd43ac2b5c0fdbcb3d77edeb0b259c89797ff.exe
    "C:\Users\Admin\AppData\Local\Temp\4521cbde8a1518519596ae62606bd43ac2b5c0fdbcb3d77edeb0b259c89797ff.exe"
    1⤵
      PID:368
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 368 -s 236
        2⤵
        • Program crash
        PID:4808
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 368 -ip 368
      1⤵
        PID:4696

      Network

        No results found
      • 93.184.221.240:80
        46 B
        1
      • 93.184.220.29:80
        322 B
        7
      • 93.184.220.29:80
        322 B
        7
      • 93.184.220.29:80
        260 B
        5
      • 52.182.143.210:443
        322 B
        7
      No results found

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/368-132-0x0000000000400000-0x0000000000429000-memory.dmp

        Filesize

        164KB

      We care about your privacy.

      This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.