Overview

overview

8

Static

static

8

947e357476...2f.exe

windows7-x64

8

947e357476...2f.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    111s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/12/2022, 13:17

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    947e3574763fa14baa6856082eb7c5ea9ccbef149cc188ee02e0d68cda7e222f.exe

  • Size

    153KB

  • MD5

    1f1891b70bf1bfddec28e1055f58e4b4

  • SHA1

    09a502ff8da27c0d7ec6f052e2ab7ee571d5e7e0

  • SHA256

    947e3574763fa14baa6856082eb7c5ea9ccbef149cc188ee02e0d68cda7e222f

  • SHA512

    50dcaf7b479896b552a5655a392fbdd074b7c2d91d3f4a9b8986f0dd14402718837cd5f76672828780c7ca14ea0e491556114230e4b06732790cbea70e6f6c99

  • SSDEEP

    3072:u6mYOY8doiwNuYPZnmGMmY6ArP1oIR9yDhsM2tlyfU:u6vuxGpY/r+Wya1B

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\947e3574763fa14baa6856082eb7c5ea9ccbef149cc188ee02e0d68cda7e222f.exe
    "C:\Users\Admin\AppData\Local\Temp\947e3574763fa14baa6856082eb7c5ea9ccbef149cc188ee02e0d68cda7e222f.exe"
    1⤵
      PID:4344
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4344 -s 356
        2⤵
        • Program crash
        PID:4896
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4344 -s 360
        2⤵
        • Program crash
        PID:4192
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4344 -ip 4344
      1⤵
        PID:5008
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 4344 -ip 4344
        1⤵
          PID:4960

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • memory/4344-132-0x0000000053140000-0x0000000053188000-memory.dmp

                Filesize

                288KB

                Download