Overview

overview

3

Static

static

3

CrackFix/FIFA19.exe

windows7-x64

1

CrackFix/FIFA19.exe

windows10-2004-x64

1

CrackFix/I...in.dll

windows7-x64

3

CrackFix/I...in.dll

windows10-2004-x64

3

CrackFix/dbdata.dll

windows7-x64

1

CrackFix/dbdata.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    147s
  • max time network
    171s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230824-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230824-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-08-2023 22:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    CrackFix/ItsAMe_Origin.dll

  • Size

    18KB

  • MD5

    5dd3256a6c589156ff3e09a29e1c8145

  • SHA1

    11ad79844825681f11c57a0ede5c3889b8d3b341

  • SHA256

    4a42e539dc4c2680e4ff92d99e1945955dde4c440bd9218641ddffd57fd81b6b

  • SHA512

    7f978820575ad83544f0cd69574a3b21be743dcad1d7455239d5edd383bc322ebb92744c4e7dd101c5741fdb54e1471c376c8676a5e70cfece7db8a94946b807

  • SSDEEP

    192:QVjrA5uOlDOAgUCCK0uvA4jO0HDigCPTeu9vIQ5n7/V/tKFPDqHVHCnHmmabvY7q:Q9r4DDiDvAlOvCTe2Ag/Snwp

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\CrackFix\ItsAMe_Origin.dll,#1
    1⤵
      PID:5072
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 5072 -s 328
        2⤵
        • Program crash
        PID:3640
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 184 -p 5072 -ip 5072
      1⤵
        PID:3188

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/5072-0-0x000000003B400000-0x000000003B40D000-memory.dmp

        Filesize

        52KB

        Download