Analysis
-
max time kernel
39s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
11/10/2022, 08:14
General
-
Target
20180e1b5b79aa513773864dcff99b25d4623959ade8dd61c84848f1c4e9cc7a.exe
-
Size
133KB
-
MD5
60e91c49aaebeba403b9846fe51b0060
-
SHA1
76a265f1f35c84ded2b119f9e64c8dbf70ee815c
-
SHA256
20180e1b5b79aa513773864dcff99b25d4623959ade8dd61c84848f1c4e9cc7a
-
SHA512
ee9614e84dc5668422b72b6cec35d9bc05e42f785f3e2c7b40e7a7a718da8527434d9da21dcdee948a41dab441945a2fdecc00c946df30b1df39ca5384134357
-
SSDEEP
3072:AV3pohuL/qbvBsifphYSoA0GbhbhiepqiUDq/K:VuT+vBjDY5A0Gbviepq/Dj
Score
8/10
Malware Config
Signatures
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\20180e1b5b79aa513773864dcff99b25d4623959ade8dd61c84848f1c4e9cc7a.exe"C:\Users\Admin\AppData\Local\Temp\20180e1b5b79aa513773864dcff99b25d4623959ade8dd61c84848f1c4e9cc7a.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\20180e1b5b79aa513773864dcff99b25d4623959ade8dd61c84848f1c4e9cc7a.exe?2⤵
- Suspicious behavior: GetForegroundWindowSpam
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
156KB
-
Filesize
60KB
-
Filesize
156KB