Overview

overview

3

Static

static

暗黑修�...��.exe

windows7-x64

3

暗黑修�...��.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    103s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-11-2022 02:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    暗黑修仙登录器/暗黑修仙登录器.exe

  • Size

    2.4MB

  • MD5

    7882116db19dc891772558f67c2ec04c

  • SHA1

    07af2659ee09c84d41c61bd1f7463343f249f0ee

  • SHA256

    8d39fea03a9e4bdfa9f1c0049cf32b72944eee7246b8c18aee21107bf52a85ff

  • SHA512

    bdb4cd5f58ea132f4b7d730140b8989cda46dfda2564754abb20cd67738f3627f03f46ffe5243453da59f608e885826edca372ae289bdae49b7d1bc5a295aa7b

  • SSDEEP

    49152:xvWdKorxp/zmf7YJEn7reeaYTwd62nmhY222WWWWx22XY/222WWWWx22+M:sI4xp88E7qVYMdEhY222WWWWx22I/22O

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\暗黑修仙登录器\暗黑修仙登录器.exe
    "C:\Users\Admin\AppData\Local\Temp\暗黑修仙登录器\暗黑修仙登录器.exe"
    1⤵
      PID:4540
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4540 -s 536
        2⤵
        • Program crash
        PID:3348
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4540 -ip 4540
      1⤵
        PID:5024

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4540-135-0x0000000000400000-0x000000000068D000-memory.dmp

        Filesize

        2.6MB

        Download