Overview

overview

10

Static

static

10

f892e1a0e6...37.exe

windows7-x64

10

f892e1a0e6...37.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    150s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/07/2024, 01:21

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    f892e1a0e6aa57222923f5abf4245b7f005751978c5cab7572c931f469c7b537.exe

  • Size

    1.7MB

  • MD5

    37e142f731ebfe348d1dcd4cdd504e7b

  • SHA1

    a4b9e696e158790c81c30e57a5d4938cfa0898a3

  • SHA256

    f892e1a0e6aa57222923f5abf4245b7f005751978c5cab7572c931f469c7b537

  • SHA512

    c7d681a300a0397d7f43fde547c5daf71ee83674cbbcf5d7999218b6d275172107468c2dfe3654a818e0198fa1d581ee258d06ec236f983ccc414b11470e2fb4

  • SSDEEP

    24576:WWCo1Y71/q0BE0c9C1EtVSuhtbgzyp12tmOHiSqvoCtKxJ1:vqh/qeRuhpZMiDM3

Score
10/10
blackguardstealer

Malware Config

Signatures

  • BlackGuard

    Infostealer first seen in Late 2021.

    stealerblackguard
  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f892e1a0e6aa57222923f5abf4245b7f005751978c5cab7572c931f469c7b537.exe
    "C:\Users\Admin\AppData\Local\Temp\f892e1a0e6aa57222923f5abf4245b7f005751978c5cab7572c931f469c7b537.exe"
    1⤵
      PID:396
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 396 -s 744
        2⤵
        • Program crash
        PID:2756
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 396 -ip 396
      1⤵
        PID:3996

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/396-0-0x00000000753DE000-0x00000000753DF000-memory.dmp

              Filesize

              4KB

              Download

            • memory/396-1-0x0000000000070000-0x000000000022A000-memory.dmp

              Filesize

              1.7MB

              Download