61c22a38a90e5f3c37f6c37a8d68fd8b33aea6cbdb49f83097d6368752020e57

Analysis

max time kernel
36s
max time network
41s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
11/10/2022, 05:46 UTC

Target

61c22a38a90e5f3c37f6c37a8d68fd8b33aea6cbdb49f83097d6368752020e57.exe
Size

58KB
MD5

6d3f919a471c102b21477ff3fd8c8ef0
SHA1

2af1dd9eb9262b60e5b6f2b1aa0d308444038a03
SHA256

61c22a38a90e5f3c37f6c37a8d68fd8b33aea6cbdb49f83097d6368752020e57
SHA512

67473f178ec823d0641c29839e4859eb2fc62e3526266c9c16ca67542962df473b7ff2cca4ff915e1fee2c79d7e36be5daff831e08a8f95402c0058e0d5fd570
SSDEEP

1536:tHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVtW9Z:tHoLde/OgV432UcP39hXJZnWn

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1148-54-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	61c22a38a90e5f3c37f6c37a8d68fd8b33aea6cbdb49f83097d6368752020e57.exe

C:\Users\Admin\AppData\Local\Temp\61c22a38a90e5f3c37f6c37a8d68fd8b33aea6cbdb49f83097d6368752020e57.exe
"C:\Users\Admin\AppData\Local\Temp\61c22a38a90e5f3c37f6c37a8d68fd8b33aea6cbdb49f83097d6368752020e57.exe"
1⤵
- Drops file in Windows directory
PID:1148

memory/1148-54-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download