Resubmissions

13-01-2023 02:01

230113-cfl75shb5w 8

13-01-2023 00:29

230113-asz9esff81 8

Analysis

  • max time kernel
    1s
  • max time network
    45s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13-01-2023 00:29

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\FD Tool 3.8 (Bypassfrpfiles.com)\FD Tool 3.8 AsiaTelecom No.1 Call 18001037001\FD Tool 3.8 Cracked\.exe command="C:\Users\Admin\AppData\Local\Temp\FD Tool 3.8 (Bypassfrpfiles.com)\FD Tool 3.8 AsiaTelecom No.1 Call 18001037001\FD Tool 3.8 Cracked\.exe" wdir=C:\Users\Admin\AppData\Local\Temp\FD Tool 3.8 (Bypassfrpfiles.com)\FD Tool 3.8 AsiaTelecom No.1 Call 18001037001\FD Tool 3.8 Cracked Payload error: The %1 application cannot be run in Win32 mode.

General

  • Target

    FD Tool 3.8 (Bypassfrpfiles.com)/FD Tool 3.8 AsiaTelecom No.1 Call 18001037001/FD Tool 3.8 Cracked/.exe

  • Size

    24KB

  • MD5

    e267af6c31952ca1f7d4872dfa23fe82

  • SHA1

    2ebe412e783f1d034faeb337783e5cb1437778f5

  • SHA256

    79422f1ed94982fa52379108bc8045c0312ea57dfa469cf96bd93f536d99b88b

  • SHA512

    d12794122e3825eeac8f74fb2a86700173e4eb0ad7644d384047bff071c58637744b021395e427ca68aa588f63200ee4d095ef6cec31fa764d3d7c38d6ef87cd

  • SSDEEP

    384:NnrkfdCoJJoyKGeRvAAzPDU2IbRfDq4Hbqn4jQIxEUxY7VbIlUS18:NnrIzoQT2U2OfDp24jX3ke

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\FD Tool 3.8 (Bypassfrpfiles.com)\FD Tool 3.8 AsiaTelecom No.1 Call 18001037001\FD Tool 3.8 Cracked\.exe
    "C:\Users\Admin\AppData\Local\Temp\FD Tool 3.8 (Bypassfrpfiles.com)\FD Tool 3.8 AsiaTelecom No.1 Call 18001037001\FD Tool 3.8 Cracked\.exe"
    1⤵
      PID:5028

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads