Overview

overview

8

Static

static

8

f9f9ba4daa...91.exe

windows7-x64

8

f9f9ba4daa...91.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    148s
  • max time network
    173s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/10/2022, 03:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    f9f9ba4daac4d60a8f6456479a885c5ac6bbe89236c6988e1749620a3d3a1e91.exe

  • Size

    447KB

  • MD5

    782330984e04bd395b770f255b6ab763

  • SHA1

    406e133551fe02efe8c57e04d59a97c617cf7f0f

  • SHA256

    f9f9ba4daac4d60a8f6456479a885c5ac6bbe89236c6988e1749620a3d3a1e91

  • SHA512

    69be3c8d09aefe8b9c8704bba591988528c6db4c4324d29df28d783159ad7e7c98566e09659a217ec6768dd92d2e92f4ac89765da980396c80d9ea452cf99037

  • SSDEEP

    6144:y60XjJgmx9jfumGiKW+s+9H/WdLb9lJ9uEYFWhs7YM2BszK:yFGHJDfuX939uV

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f9f9ba4daac4d60a8f6456479a885c5ac6bbe89236c6988e1749620a3d3a1e91.exe
    "C:\Users\Admin\AppData\Local\Temp\f9f9ba4daac4d60a8f6456479a885c5ac6bbe89236c6988e1749620a3d3a1e91.exe"
    1⤵
      PID:4848
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4848 -s 184
        2⤵
        • Program crash
        PID:2408
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4848 -ip 4848
      1⤵
        PID:4828

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4848-132-0x0000000001000000-0x0000000001098000-memory.dmp

        Filesize

        608KB

        Download