Analysis
-
max time kernel
146s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
09-03-2024 01:07
General
-
Target
8dbca63ae5c5bbaf5aa6a24fd5474e7757131cd55f42f9e7463afbaae6dea325.exe
-
Size
14.2MB
-
MD5
2d1cbe5989d94ee11eb750206ddcdedc
-
SHA1
d2e2ecb56630a857eab3d909c8b2af5b4da90860
-
SHA256
8dbca63ae5c5bbaf5aa6a24fd5474e7757131cd55f42f9e7463afbaae6dea325
-
SHA512
13e917240478b729ae040370b7ec037d7cc8fbe129a73c0f5f3bac008721162adc375542956b58ae9ea48ece9033e3e8e5d89ae95bd2bb18d41962cbbfe99bda
-
SSDEEP
393216:Iw5Tkdry0WyNUHKoc8tQsvcsM+o4YkSdOTByWR:Iw5T0ryx9Hpc8astK9OIU
Score
10/10
Malware Config
Signatures
-
BlackGuard
Infostealer first seen in Late 2021.
-
Program crash 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8dbca63ae5c5bbaf5aa6a24fd5474e7757131cd55f42f9e7463afbaae6dea325.exe"C:\Users\Admin\AppData\Local\Temp\8dbca63ae5c5bbaf5aa6a24fd5474e7757131cd55f42f9e7463afbaae6dea325.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2468 -s 12122⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2468 -s 12122⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2468 -ip 24681⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 496 -p 2468 -ip 24681⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.7MB
-
Filesize
14.2MB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
64KB
-
Filesize
40KB
-
Filesize
2.9MB
-
Filesize
7.7MB