d7bf27f3ca1e1d7f86a7d1a1d05a1e2b402cc88334d1790c73d7c071f8e982f4

Analysis

max time kernel
143s
max time network
184s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
04-10-2022 00:11

Target

d7bf27f3ca1e1d7f86a7d1a1d05a1e2b402cc88334d1790c73d7c071f8e982f4.exe
Size

58KB
MD5

020c7c71f4e8e411c9de1d3aa434a8c0
SHA1

9510e8864b04924ad024254a0a47655462917eee
SHA256

d7bf27f3ca1e1d7f86a7d1a1d05a1e2b402cc88334d1790c73d7c071f8e982f4
SHA512

14ad2f0286fc68c560cc62dd35c41eefe368800db3a7edf464a225153c05c46a45cda402639ddc79cbeae058adc2fbec6a9e1a2725b93c96a66a50e6027a2f65
SSDEEP

1536:tHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVtcI:tHoLde/OgV432UcP39hXJZnb

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4692-132-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral2/memory/4692-133-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	d7bf27f3ca1e1d7f86a7d1a1d05a1e2b402cc88334d1790c73d7c071f8e982f4.exe

C:\Users\Admin\AppData\Local\Temp\d7bf27f3ca1e1d7f86a7d1a1d05a1e2b402cc88334d1790c73d7c071f8e982f4.exe
"C:\Users\Admin\AppData\Local\Temp\d7bf27f3ca1e1d7f86a7d1a1d05a1e2b402cc88334d1790c73d7c071f8e982f4.exe"
1⤵
- Drops file in Windows directory
PID:4692

memory/4692-132-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/4692-133-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download