Overview

overview

7

Static

static

7

2cfe3d0f13...81.exe

windows7-x64

1

2cfe3d0f13...81.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    141s
  • max time network
    103s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/12/2023, 07:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2cfe3d0f13015176def8b2e0c172a181.exe

  • Size

    513KB

  • MD5

    2cfe3d0f13015176def8b2e0c172a181

  • SHA1

    3eb36f4f5e034b29496a3b9fa03091b884fb3b4a

  • SHA256

    ce6cbc0d1015e8bf97d633b19627afbfdc5cc1afd452fd67b60d18d92c566406

  • SHA512

    2e6eb42c9ee1fa09d87ed247231519489f81feb243acd8f1adbdb045ceb624ad12d5908d603eff1265cff22deca253e8dc69271cdf5b8deb6e6a3b8a864a8973

  • SSDEEP

    12288:86XBqeySsPanOSsPa/2iSsPat1SsPau3SsPay4SsPaUoSsPaHmSsPaZZSsPam2Se:XXFySokOSoQ2iSom1SoH3SoP4SojoSop

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2cfe3d0f13015176def8b2e0c172a181.exe
    "C:\Users\Admin\AppData\Local\Temp\2cfe3d0f13015176def8b2e0c172a181.exe"
    1⤵
      PID:3480
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3480 -s 280
        2⤵
        • Program crash
        PID:3756
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3480 -ip 3480
      1⤵
        PID:872

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3480-0-0x0000000000400000-0x0000000000507000-memory.dmp

        Filesize

        1.0MB

        Download

      • memory/3480-1-0x0000000000400000-0x0000000000507000-memory.dmp

        Filesize

        1.0MB

        Download