Analysis

  • max time kernel
    35s
  • max time network
    42s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    03/10/2022, 07:12

General

  • Target

    5a3e75470ce85e32c6497dc6bf29e47d09680813c495673dca965c91b231c4a8.exe

  • Size

    32KB

  • MD5

    6861e0674ff27e92814a298208bb196c

  • SHA1

    d8df0baa6d3f46f985a99f7da3178b09065c4026

  • SHA256

    5a3e75470ce85e32c6497dc6bf29e47d09680813c495673dca965c91b231c4a8

  • SHA512

    c5e7ad02a2211af643e4dede0da8e5ee25a145717c02f6bbe97bd1fd8c87a39c1d2b392980901f01326a80bed3878c8512b39b4cb42cb8f6217acfae43a0f312

  • SSDEEP

    384:wD3ENcyytylmUskMQrm9ug7eQkgLKS4TLJHbq1a+Oc20ezMoMM7:6FtqsErm9xi9gpmLJHOaMXo17

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5a3e75470ce85e32c6497dc6bf29e47d09680813c495673dca965c91b231c4a8.exe
    "C:\Users\Admin\AppData\Local\Temp\5a3e75470ce85e32c6497dc6bf29e47d09680813c495673dca965c91b231c4a8.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1492

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1492-54-0x0000000000400000-0x000000000041A000-memory.dmp

    Filesize

    104KB

  • memory/1492-57-0x0000000000400000-0x000000000041A000-memory.dmp

    Filesize

    104KB