Analysis

  • max time kernel
    14s
  • max time network
    47s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2022, 08:34

General

  • Target

    24de94e80f7827f379a2b1fac1fd513ac3a4d9d0f0b6c3a602de039448276c0d.exe

  • Size

    99KB

  • MD5

    31161d796f6fa8a4fc0d5a0fa5712392

  • SHA1

    c411cf95836e8af5af5c91e864ed4c3af92ce366

  • SHA256

    24de94e80f7827f379a2b1fac1fd513ac3a4d9d0f0b6c3a602de039448276c0d

  • SHA512

    26d7b9d2adc93752f91367794cb9d0c834be6dcaf988b8ef8391eefc8740db59fa6df4f3c06bfa322a9b055a8b414f9648a4d4b1b6e8fc0a61312ab019cdcfba

  • SSDEEP

    3072:gwi089AvUB1LZPE1AAQvCTjE/j15AY41C:s0wB1LlyVb+15AYF

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of UnmapMainImage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\24de94e80f7827f379a2b1fac1fd513ac3a4d9d0f0b6c3a602de039448276c0d.exe
    "C:\Users\Admin\AppData\Local\Temp\24de94e80f7827f379a2b1fac1fd513ac3a4d9d0f0b6c3a602de039448276c0d.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of UnmapMainImage
    PID:1208

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1208-54-0x0000000000400000-0x0000000000440000-memory.dmp

    Filesize

    256KB

  • memory/1208-56-0x0000000000400000-0x0000000000417000-memory.dmp

    Filesize

    92KB

  • memory/1208-59-0x0000000076261000-0x0000000076263000-memory.dmp

    Filesize

    8KB

  • memory/1208-60-0x0000000000400000-0x0000000000417000-memory.dmp

    Filesize

    92KB