7559e6ca8b77400f88bf4e67208a1c32570a670068eccae9e3d226cc5471bd47

Resubmissions

28-04-2024 18:31

21-04-2024 08:57

21-04-2024 05:45

18-04-2024 19:05

18-04-2024 16:34

04-03-2024 18:33

02-03-2024 17:01

02-03-2024 10:05

max time kernel
66s
max time network
52s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
28-04-2024 18:31

Target

bazaar.2020.02/HEUR-Backdoor.MSIL.SpyGate.exe
Size

32KB
MD5

8e0bd59d206a77ef6445bc9c55d1e43e
SHA1

bbddbe817a89614a77cac8c3a6432f61b5cb1493
SHA256

def7ecf8aa63604355204120f9c28e669b33268e3440e689b7e9beaaf7e7e7ef
SHA512

2e35b68e6e7959bb408028efc631d850c74fff58220a4c3248f9b54878acd89a865a801125e957b52eabb5ba758138e09b9f5a25f0ea42b07c58bea06963a35c
SSDEEP

384:Ml3kcQnkUoSsJGG5ZfB3yIwt4U3Qu0/7FTgPtTFAqzmmFHsSi2c:MWcQneSwP5ZRs4U3Cedsf

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid	pid_target	Process	procid_target
2320	4580	WerFault.exe	84

C:\Users\Admin\AppData\Local\Temp\bazaar.2020.02\HEUR-Backdoor.MSIL.SpyGate.exe
"C:\Users\Admin\AppData\Local\Temp\bazaar.2020.02\HEUR-Backdoor.MSIL.SpyGate.exe"
1⤵
PID:4580
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4580 -s 448
  2⤵
  - Program crash
  PID:2320

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4580 -ip 4580
1⤵
PID:4088

memory/4580-0-0x0000000074C90000-0x0000000075241000-memory.dmp

Filesize
5.7MB

Download
memory/4580-2-0x0000000000B60000-0x0000000000B70000-memory.dmp

Filesize
64KB

Download
memory/4580-1-0x0000000074C90000-0x0000000075241000-memory.dmp

Filesize
5.7MB

Download