Overview

overview

3

Static

static

3

Confuser.CLI.exe

windows7-x64

3

Confuser.CLI.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    138s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/05/2023, 19:06

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Confuser.CLI.exe

  • Size

    28KB

  • MD5

    f03e1cfb8bfed0b793243a3fe5b19588

  • SHA1

    686baab670836df515af6131e1e89737b13d503d

  • SHA256

    2b3e5cb7f96589e5377700a5f7f25e9fc6a14539e85256e6ac6e85c07f769f61

  • SHA512

    a57f3807a9064288080e8585d6193d184015ae832c91d4a1ed5f89070ceaddf00fede0727869c31045cd46c1fd5fef6b7baf9da7869cb80950b08dfb141fe051

  • SSDEEP

    384:9pFyvbsul3krz2AmtZ1TltphRieCcJObGPIj8SC3sY75Y+wGIQlWqj8z9DV+V/8O:9f83k32AWH9hgbNzI5VogBji15/kHX

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Confuser.CLI.exe
    "C:\Users\Admin\AppData\Local\Temp\Confuser.CLI.exe"
    1⤵
      PID:3392
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 3392 -s 808
        2⤵
        • Program crash
        PID:1464
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 448 -p 3392 -ip 3392
      1⤵
        PID:4532

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3392-133-0x00000000007F0000-0x00000000007FE000-memory.dmp

        Filesize

        56KB

        Download