Resubmissions

13/01/2023, 02:01

230113-cfl75shb5w 8

13/01/2023, 00:29

230113-asz9esff81 8

Analysis

  • max time kernel
    19s
  • max time network
    36s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    13/01/2023, 00:29

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\FD Tool 3.8 (Bypassfrpfiles.com)\FD Tool 3.8 AsiaTelecom No.1 Call 18001037001\FD Tool 3.8 Cracked\.exe command="C:\Users\Admin\AppData\Local\Temp\FD Tool 3.8 (Bypassfrpfiles.com)\FD Tool 3.8 AsiaTelecom No.1 Call 18001037001\FD Tool 3.8 Cracked\.exe" wdir=C:\Users\Admin\AppData\Local\Temp\FD Tool 3.8 (Bypassfrpfiles.com)\FD Tool 3.8 AsiaTelecom No.1 Call 18001037001\FD Tool 3.8 Cracked Payload error: The %1 application cannot be run in Win32 mode.

General

  • Target

    FD Tool 3.8 (Bypassfrpfiles.com)/FD Tool 3.8 AsiaTelecom No.1 Call 18001037001/FD Tool 3.8 Cracked/.exe

  • Size

    12KB

  • MD5

    1d19770f88fa22dacb7f488ea8f8ee6b

  • SHA1

    b3a544184357759e3ad10a3ff321ba1c91d73513

  • SHA256

    ad100c774058cf878b6006518f3dcdbdee475f3c9808fc5d844947d9c305fae5

  • SHA512

    e91116f600c970f2da9e36436516d48484939bc3cacfae515a99b9993aff0c05ca51942b9aa24acdbb182c79636c24a6af4a12dc1854eba1d6839a5850d9f5c4

  • SSDEEP

    192:cGyq3LPYg8QLP/URvMBFFs2LBp+TZLkN+PxYHIVn0yLR1NXl5HU:W6LPG0qvMBLs2LBp+TZLkWxwhyFHU

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\FD Tool 3.8 (Bypassfrpfiles.com)\FD Tool 3.8 AsiaTelecom No.1 Call 18001037001\FD Tool 3.8 Cracked\.exe
    "C:\Users\Admin\AppData\Local\Temp\FD Tool 3.8 (Bypassfrpfiles.com)\FD Tool 3.8 AsiaTelecom No.1 Call 18001037001\FD Tool 3.8 Cracked\.exe"
    1⤵
      PID:1324

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1324-54-0x0000000000010000-0x000000000001B000-memory.dmp

      Filesize

      44KB