353b0b2670a10c1e130ecb4ca03eedbf3d68e566a0fcf4589508bbd63f963962

Analysis

max time kernel
116s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
03/10/2022, 19:50

Target

353b0b2670a10c1e130ecb4ca03eedbf3d68e566a0fcf4589508bbd63f963962.exe
Size

1.2MB
MD5

30f3c0cdba43cd7c0dbf9f3bbda2a1f9
SHA1

0fe1b10eddb15d5fb55dbe7c071d031828893d1e
SHA256

353b0b2670a10c1e130ecb4ca03eedbf3d68e566a0fcf4589508bbd63f963962
SHA512

3844fcbc8e6a80da32c88b62bd7d87f061336f745a917e49105b6127636e5e1156d16e268304c36eddadc74b9b544fdb7efe19e0479da0634093df647354ed6e
SSDEEP

24576:ayXJF9PxP9SCj3PGL3j3eRjkWmKp7Ajjl:aMJF5xQCj3PQ37eRWKp7Afl

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/1672-132-0x0000000000400000-0x000000000056A000-memory.dmp	upx
behavioral2/memory/1672-133-0x0000000000400000-0x000000000056A000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1672	353b0b2670a10c1e130ecb4ca03eedbf3d68e566a0fcf4589508bbd63f963962.exe

C:\Users\Admin\AppData\Local\Temp\353b0b2670a10c1e130ecb4ca03eedbf3d68e566a0fcf4589508bbd63f963962.exe
"C:\Users\Admin\AppData\Local\Temp\353b0b2670a10c1e130ecb4ca03eedbf3d68e566a0fcf4589508bbd63f963962.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1672

memory/1672-132-0x0000000000400000-0x000000000056A000-memory.dmp

Filesize
1.4MB

Download
memory/1672-133-0x0000000000400000-0x000000000056A000-memory.dmp

Filesize
1.4MB

Download