77a977f828cf3b0d621b9aea75d2a8d2fd54ffb86f95027f9794b46d4acabfa3

Analysis

max time kernel
41s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
11/10/2022, 04:40

Target

77a977f828cf3b0d621b9aea75d2a8d2fd54ffb86f95027f9794b46d4acabfa3.exe
Size

37KB
MD5

7c317e6e397e56e9b42816cc5fb5ae54
SHA1

db86c08c3f1055bf136cb0a6e66375440873ee01
SHA256

77a977f828cf3b0d621b9aea75d2a8d2fd54ffb86f95027f9794b46d4acabfa3
SHA512

3549c8513652e6531eeeb8857c24b99de028cd45befbd6df3d6ecea1840cc83e01f41034107ec8eb37481b36f864d21bdcc189c6bec19e34355a4113a5be34d9
SSDEEP

384:fP4bB4Z1iDiYEtZ9G3FFPw4bB4Z1WvdqFMYJ:H4F4fiDiJns3FFY4F4fEwFMG

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1884-56-0x0000000000400000-0x0000000000409600-memory.dmp	upx
behavioral1/memory/1884-57-0x0000000000400000-0x0000000000409600-memory.dmp	upx

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1884	77a977f828cf3b0d621b9aea75d2a8d2fd54ffb86f95027f9794b46d4acabfa3.exe

C:\Users\Admin\AppData\Local\Temp\77a977f828cf3b0d621b9aea75d2a8d2fd54ffb86f95027f9794b46d4acabfa3.exe
"C:\Users\Admin\AppData\Local\Temp\77a977f828cf3b0d621b9aea75d2a8d2fd54ffb86f95027f9794b46d4acabfa3.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1884

memory/1884-56-0x0000000000400000-0x0000000000409600-memory.dmp

Filesize
37KB

Download
memory/1884-57-0x0000000000400000-0x0000000000409600-memory.dmp

Filesize
37KB

Download