Analysis

  • max time kernel
    145s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/12/2022, 19:08

General

  • Target

    f0ad728deabfbea0f415a53ac8f09a1750cf85dcd4878e8a12b76b1b867a7633.exe

  • Size

    34KB

  • MD5

    713aaa74e754b5827de9889853b72e09

  • SHA1

    9814e2edb1a663ba4b0ff05cb127ae70efa88a21

  • SHA256

    f0ad728deabfbea0f415a53ac8f09a1750cf85dcd4878e8a12b76b1b867a7633

  • SHA512

    4be4633528f5c6bc436ebdd0fe1c2bd879b15c1f36b846a74fee8f7ccbdffbaf5afbb7cf9ac3f2577749835b06f3d052022b48e7f8203ff8d1f34526ad5b9c65

  • SSDEEP

    768:4Ma2+FwiAZao7sLsqJvWfrIooxQxUdgZXPbN9L5pldmdA:mW7es1fcQ22XhTcq

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f0ad728deabfbea0f415a53ac8f09a1750cf85dcd4878e8a12b76b1b867a7633.exe
    "C:\Users\Admin\AppData\Local\Temp\f0ad728deabfbea0f415a53ac8f09a1750cf85dcd4878e8a12b76b1b867a7633.exe"
    1⤵
      PID:3228
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3228 -s 228
        2⤵
        • Program crash
        PID:2220
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3228 -ip 3228
      1⤵
        PID:3632

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/3228-132-0x0000000000400000-0x0000000000421000-memory.dmp

              Filesize

              132KB