b71df12d32cc37c018e6a3d1b861e46d8e094cfa3ad3e13ce682bf278a166079

Analysis

max time kernel
42s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
02-10-2022 11:09

Target

b71df12d32cc37c018e6a3d1b861e46d8e094cfa3ad3e13ce682bf278a166079.exe
Size

58KB
MD5

70d89127a651e6facb3defcfaa134210
SHA1

4852418e3d701092b668cfb98a6340cfd02095f1
SHA256

b71df12d32cc37c018e6a3d1b861e46d8e094cfa3ad3e13ce682bf278a166079
SHA512

9526bf7f83d45c2e41253519ece98bea5feeb0dc8950dba0b75acdb80004e6f7be64010bc1da9fcf73fefa32e39d61041f8f4bfb9fd4c33714ca33114e9b709e
SSDEEP

1536:tHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVt4iTU:tHoLde/OgV432UcP39hXJZna

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1032-54-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral1/memory/1032-55-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	b71df12d32cc37c018e6a3d1b861e46d8e094cfa3ad3e13ce682bf278a166079.exe

C:\Users\Admin\AppData\Local\Temp\b71df12d32cc37c018e6a3d1b861e46d8e094cfa3ad3e13ce682bf278a166079.exe
"C:\Users\Admin\AppData\Local\Temp\b71df12d32cc37c018e6a3d1b861e46d8e094cfa3ad3e13ce682bf278a166079.exe"
1⤵
- Drops file in Windows directory
PID:1032

memory/1032-54-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/1032-55-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download