Overview

overview

8

Static

static

8

bde2059ed0...54.exe

windows7-x64

8

bde2059ed0...54.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    185s
  • max time network
    192s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/12/2022, 12:31

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    bde2059ed0933dab2186563089e76878c29a7b226930f5ec6f24f2ac2130ed54.exe

  • Size

    151KB

  • MD5

    95daa1a89f5f7a641b4499d75880bba9

  • SHA1

    03a00f041847ee089913dedb26209a7d5211540b

  • SHA256

    bde2059ed0933dab2186563089e76878c29a7b226930f5ec6f24f2ac2130ed54

  • SHA512

    90087fa0009e14a8bc0dbff2fb5f9f735ce7abbc9dd24392cd802a3d7d470e0a6ae61dd975010e032a1289f5aca852e4f9d2cf67b1604a4604006ab9d89cb41d

  • SSDEEP

    3072:CP293QEZb4+9r4DZWPL5nfO1HTOBlMLvwCStq5nKQFia65DXQuEAGdQCY:v93iQL5nfGFvwptAnbFiR5PE1a

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bde2059ed0933dab2186563089e76878c29a7b226930f5ec6f24f2ac2130ed54.exe
    "C:\Users\Admin\AppData\Local\Temp\bde2059ed0933dab2186563089e76878c29a7b226930f5ec6f24f2ac2130ed54.exe"
    1⤵
      PID:2056
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2056 -s 324
        2⤵
        • Program crash
        PID:4340
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 204 -p 2056 -ip 2056
      1⤵
        PID:1480

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/2056-132-0x0000000001000000-0x0000000001053000-memory.dmp

              Filesize

              332KB

              Download

            • memory/2056-133-0x0000000001000000-0x0000000001053000-memory.dmp

              Filesize

              332KB

              Download