9c89ec02f1476749f8904f5202a2cfc46bf24e05fe52f018529e98f7da3c0b1b

General

Target

9c89ec02f1476749f8904f5202a2cfc46bf24e05fe52f018529e98f7da3c0b1b.exe
Size

1.9MB
MD5

845d9b43b7d2f4a73aad79155473d00c
SHA1

737a47b7516a1c04df2a109fd9c0c441b97d3fa8
SHA256

9c89ec02f1476749f8904f5202a2cfc46bf24e05fe52f018529e98f7da3c0b1b
SHA512

7b3b813e2e590767298f0b5b75a3e28402e735c234bcc5d70f3933e4f0918fd04af952fb2f86369393a0af6454c011f59b932e2a4ac8b2b7d2f66fd8f9f0c467
SSDEEP

24576:OuUHm/NQiI4L41f6GpPVLZ9KMYDZwf2FfWl8KuqGavkg3NyNIbbbIoIBAUZLYhzp:OuRN41fh9l9V+s8KuqGaX0ToIBAUZLYb

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 26 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/2060-132-0x0000000010000000-0x000000001003D000-memory.dmp	upx
behavioral2/memory/2060-135-0x0000000010000000-0x000000001003D000-memory.dmp	upx
behavioral2/memory/2060-136-0x0000000010000000-0x000000001003D000-memory.dmp	upx
behavioral2/memory/2060-137-0x0000000010000000-0x000000001003D000-memory.dmp	upx
behavioral2/memory/2060-134-0x0000000010000000-0x000000001003D000-memory.dmp	upx
behavioral2/memory/2060-139-0x0000000010000000-0x000000001003D000-memory.dmp	upx
behavioral2/memory/2060-141-0x0000000010000000-0x000000001003D000-memory.dmp	upx
behavioral2/memory/2060-143-0x0000000010000000-0x000000001003D000-memory.dmp	upx
behavioral2/memory/2060-145-0x0000000010000000-0x000000001003D000-memory.dmp	upx
behavioral2/memory/2060-147-0x0000000010000000-0x000000001003D000-memory.dmp	upx
behavioral2/memory/2060-149-0x0000000010000000-0x000000001003D000-memory.dmp	upx
behavioral2/memory/2060-151-0x0000000010000000-0x000000001003D000-memory.dmp	upx
behavioral2/memory/2060-153-0x0000000010000000-0x000000001003D000-memory.dmp	upx
behavioral2/memory/2060-155-0x0000000010000000-0x000000001003D000-memory.dmp	upx
behavioral2/memory/2060-162-0x0000000010000000-0x000000001003D000-memory.dmp	upx
behavioral2/memory/2060-164-0x0000000010000000-0x000000001003D000-memory.dmp	upx
behavioral2/memory/2060-160-0x0000000010000000-0x000000001003D000-memory.dmp	upx
behavioral2/memory/2060-158-0x0000000010000000-0x000000001003D000-memory.dmp	upx
behavioral2/memory/2060-166-0x0000000010000000-0x000000001003D000-memory.dmp	upx
behavioral2/memory/2060-168-0x0000000010000000-0x000000001003D000-memory.dmp	upx
behavioral2/memory/2060-170-0x0000000010000000-0x000000001003D000-memory.dmp	upx
behavioral2/memory/2060-172-0x0000000010000000-0x000000001003D000-memory.dmp	upx
behavioral2/memory/2060-174-0x0000000010000000-0x000000001003D000-memory.dmp	upx
behavioral2/memory/2060-176-0x0000000010000000-0x000000001003D000-memory.dmp	upx
behavioral2/memory/2060-178-0x0000000010000000-0x000000001003D000-memory.dmp	upx
behavioral2/memory/2060-179-0x0000000010000000-0x000000001003D000-memory.dmp	upx

Program crash 2 IoCs

pid	pid_target	Process	procid_target
4560	2060	WerFault.exe	82
1832	2060	WerFault.exe	82

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2060	9c89ec02f1476749f8904f5202a2cfc46bf24e05fe52f018529e98f7da3c0b1b.exe
2060	9c89ec02f1476749f8904f5202a2cfc46bf24e05fe52f018529e98f7da3c0b1b.exe
2060	9c89ec02f1476749f8904f5202a2cfc46bf24e05fe52f018529e98f7da3c0b1b.exe

C:\Users\Admin\AppData\Local\Temp\9c89ec02f1476749f8904f5202a2cfc46bf24e05fe52f018529e98f7da3c0b1b.exe
"C:\Users\Admin\AppData\Local\Temp\9c89ec02f1476749f8904f5202a2cfc46bf24e05fe52f018529e98f7da3c0b1b.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2060
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2060 -s 636
  2⤵
  - Program crash
  PID:4560
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2060 -s 636
  2⤵
  - Program crash
  PID:1832

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 2060 -ip 2060
1⤵
PID:4848

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 2060 -ip 2060
1⤵
PID:2696

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2060-132-0x0000000010000000-0x000000001003D000-memory.dmp

Filesize
244KB

Download
memory/2060-135-0x0000000010000000-0x000000001003D000-memory.dmp

Filesize
244KB

Download
memory/2060-136-0x0000000010000000-0x000000001003D000-memory.dmp

Filesize
244KB

Download
memory/2060-137-0x0000000010000000-0x000000001003D000-memory.dmp

Filesize
244KB

Download
memory/2060-134-0x0000000010000000-0x000000001003D000-memory.dmp

Filesize
244KB

Download
memory/2060-139-0x0000000010000000-0x000000001003D000-memory.dmp

Filesize
244KB

Download
memory/2060-141-0x0000000010000000-0x000000001003D000-memory.dmp

Filesize
244KB

Download
memory/2060-143-0x0000000010000000-0x000000001003D000-memory.dmp

Filesize
244KB

Download
memory/2060-145-0x0000000010000000-0x000000001003D000-memory.dmp

Filesize
244KB

Download
memory/2060-147-0x0000000010000000-0x000000001003D000-memory.dmp

Filesize
244KB

Download
memory/2060-149-0x0000000010000000-0x000000001003D000-memory.dmp

Filesize
244KB

Download
memory/2060-151-0x0000000010000000-0x000000001003D000-memory.dmp

Filesize
244KB

Download
memory/2060-153-0x0000000010000000-0x000000001003D000-memory.dmp

Filesize
244KB

Download
memory/2060-155-0x0000000010000000-0x000000001003D000-memory.dmp

Filesize
244KB

Download
memory/2060-162-0x0000000010000000-0x000000001003D000-memory.dmp

Filesize
244KB

Download
memory/2060-164-0x0000000010000000-0x000000001003D000-memory.dmp

Filesize
244KB

Download
memory/2060-160-0x0000000010000000-0x000000001003D000-memory.dmp

Filesize
244KB

Download
memory/2060-158-0x0000000010000000-0x000000001003D000-memory.dmp

Filesize
244KB

Download
memory/2060-166-0x0000000010000000-0x000000001003D000-memory.dmp

Filesize
244KB

Download
memory/2060-168-0x0000000010000000-0x000000001003D000-memory.dmp

Filesize
244KB

Download
memory/2060-170-0x0000000010000000-0x000000001003D000-memory.dmp

Filesize
244KB

Download
memory/2060-172-0x0000000010000000-0x000000001003D000-memory.dmp

Filesize
244KB

Download
memory/2060-174-0x0000000010000000-0x000000001003D000-memory.dmp

Filesize
244KB

Download
memory/2060-176-0x0000000010000000-0x000000001003D000-memory.dmp

Filesize
244KB

Download
memory/2060-178-0x0000000010000000-0x000000001003D000-memory.dmp

Filesize
244KB

Download
memory/2060-179-0x0000000010000000-0x000000001003D000-memory.dmp

Filesize
244KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads