Overview

overview

10

Static

static

7

eZGBWtXo.exe

windows7-x64

10

eZGBWtXo.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    91s
  • max time network
    127s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17-05-2023 09:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    eZGBWtXo.exe

  • Size

    105KB

  • MD5

    ffadb3083695657ff11b3ec0030f84d9

  • SHA1

    9597cc24a22c1a344cdd3179de91d63346045562

  • SHA256

    203b4b09f6aaacb22acc0d090cd2427cbf973abba6df229e02ce8f17686f91dd

  • SHA512

    279743502dd77c4578198cfd05a16294952fa1bb96eeb03997c8c23f39d08099c0de9219d2fca50da3dc7322dfbc2d6371feb044b25aca79d3e77a8ef7223d1d

  • SSDEEP

    1536:sOC0FvV4OguHxjhpA4Bm7uW0vSUsghQevBFkutIbgTuFqKRr0aF5frleGhd9TfBi:swV4OgSzBmh04eZFkz3Rr0gwGj9Tf8

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\eZGBWtXo.exe
    "C:\Users\Admin\AppData\Local\Temp\eZGBWtXo.exe"
    1⤵
      PID:4112
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4112 -s 264
        2⤵
        • Program crash
        PID:4384
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 4112 -ip 4112
      1⤵
        PID:1072

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4112-134-0x00000000005E0000-0x00000000005E1000-memory.dmp
        Filesize

        4KB

        Download
      • memory/4112-133-0x0000000000400000-0x000000000045D000-memory.dmp
        Filesize

        372KB

        Download