Analysis

  • max time kernel
    70s
  • max time network
    94s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/10/2022, 00:05 UTC

General

  • Target

    4674938ebdcf0c79d0019142f45adb278c4272a40ff21242a7ea3c2b089575b0.exe

  • Size

    63KB

  • MD5

    a16bb4518cbeaadb48221d975a67cd90

  • SHA1

    e44ec1205ca29250a3468ec08e909226821ba221

  • SHA256

    4674938ebdcf0c79d0019142f45adb278c4272a40ff21242a7ea3c2b089575b0

  • SHA512

    54d47612413e0749f299b31606b4f615bda38eead2b17c623cbe8568d3b755aee016370955970c07030fd35dd543bd06c3f031fe9529614256378417ff5aec3d

  • SSDEEP

    1536:MHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVt/2lx:MHoLde/OgV432UcP39hXJZn/sx

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4674938ebdcf0c79d0019142f45adb278c4272a40ff21242a7ea3c2b089575b0.exe
    "C:\Users\Admin\AppData\Local\Temp\4674938ebdcf0c79d0019142f45adb278c4272a40ff21242a7ea3c2b089575b0.exe"
    1⤵
      PID:2828
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2828 -s 380
        2⤵
        • Program crash
        PID:4768
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2828 -ip 2828
      1⤵
        PID:4908

      Network

        No results found
      • 20.42.73.24:443
        322 B
        7
      • 2.18.109.224:443
        322 B
        7
      • 87.248.202.1:80
        322 B
        7
      • 88.221.25.155:80
        322 B
        7
      No results found

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2828-132-0x0000000000400000-0x0000000000429000-memory.dmp

        Filesize

        164KB

      We care about your privacy.

      This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.