Analysis

  • max time kernel
    92s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/10/2022, 06:21

General

  • Target

    0c37eab2f68aef000619816b018bf2967263e2c5e52c815a918608c2c4bfaaf2.exe

  • Size

    548KB

  • MD5

    6dde355e8e11c84beff6305c28691ee0

  • SHA1

    a917117e65fe631f6d53e8c846b85acc8589e151

  • SHA256

    0c37eab2f68aef000619816b018bf2967263e2c5e52c815a918608c2c4bfaaf2

  • SHA512

    2e0777e8c54dbd9dbe2f547c495220f8f3d042407c07076b17ad4209de5817603ad6ede255a326d8b24aec273d03fcb89858ad6a9d45aa9f442ec58758b3546f

  • SSDEEP

    12288:1jc1c8xZkax7cymkO4QiavOkYTrCq2fCfxS0c0dcjy5D:1jcW8vkaxlkh8gfCfs0cmqyD

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0c37eab2f68aef000619816b018bf2967263e2c5e52c815a918608c2c4bfaaf2.exe
    "C:\Users\Admin\AppData\Local\Temp\0c37eab2f68aef000619816b018bf2967263e2c5e52c815a918608c2c4bfaaf2.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3920-132-0x0000000000400000-0x0000000000566000-memory.dmp

    Filesize

    1.4MB

  • memory/3920-133-0x0000000000400000-0x0000000000566000-memory.dmp

    Filesize

    1.4MB