Overview

overview

7

Static

static

7

KFWDUpdate.exe

windows7-x64

1

KFWDUpdate.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    141s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13-06-2023 18:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    KFWDUpdate.exe

  • Size

    440KB

  • MD5

    52511979a2d316ad3a2bd8d9e1f66b02

  • SHA1

    127258a2dc63df00ce0675ff35ed59b7fdcc181a

  • SHA256

    d59c16064a16e895a068413e29aea67a9a332cc397df2745c5c62a485fcde0df

  • SHA512

    637934328308a2e977e1b8fef644d98d6ce480eaae92435fa1f1291141563fe800c88f227d1dbe46c99086a0821a6d5abb2b0b5ad61c2fa17ecbfb2e6def5064

  • SSDEEP

    6144:Bh4sgWrC9KHTnf4/VBLUrZLF76D8lTwDyzRPzGvF3JMfGvWw+mqjzSxeoCDQt+YB:Bs8C9qLfWVBIFBuOSvRJw0CjuiT29s

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\KFWDUpdate.exe
    "C:\Users\Admin\AppData\Local\Temp\KFWDUpdate.exe"
    1⤵
      PID:1420

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1420-133-0x0000000000400000-0x0000000000547000-memory.dmp
      Filesize

      1.3MB

      Download
    • memory/1420-134-0x0000000000400000-0x0000000000547000-memory.dmp
      Filesize

      1.3MB

      Download
    • memory/1420-135-0x0000000000400000-0x0000000000547000-memory.dmp
      Filesize

      1.3MB

      Download
    • memory/1420-136-0x0000000000650000-0x0000000000651000-memory.dmp
      Filesize

      4KB

      Download
    • memory/1420-137-0x0000000000400000-0x0000000000547000-memory.dmp
      Filesize

      1.3MB

      Download
    • memory/1420-138-0x0000000000400000-0x0000000000547000-memory.dmp
      Filesize

      1.3MB

      Download