Analysis

  • max time kernel
    102s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    15/10/2022, 19:48

General

  • Target

    c8243e70f039d74a6fffced3793c60ed039c69e1ff0f230ed43b5cde0664ba09.exe

  • Size

    1.5MB

  • MD5

    38ebea1162225a78ca81fb1fb2eed06f

  • SHA1

    a1634920ffe0ede52cfe1b8a67482afcf213a762

  • SHA256

    c8243e70f039d74a6fffced3793c60ed039c69e1ff0f230ed43b5cde0664ba09

  • SHA512

    752af47284221967fd3a649d76f5249523be915566602b84b9a2f45e17ecebed90314948126832034d6227b167a02f82e4e98a299cffbe0e69bcb8a40bcd0f20

  • SSDEEP

    12288:9LMxhyxv664BtysdhIl4t4plpgUqdR5nWFpPoSRMGgVKMnnp+Mygc:9ajBUsdhk4iplCUqAbUGgZnnpXygc

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 24 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c8243e70f039d74a6fffced3793c60ed039c69e1ff0f230ed43b5cde0664ba09.exe
    "C:\Users\Admin\AppData\Local\Temp\c8243e70f039d74a6fffced3793c60ed039c69e1ff0f230ed43b5cde0664ba09.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1280

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1280-54-0x0000000075811000-0x0000000075813000-memory.dmp

    Filesize

    8KB

  • memory/1280-55-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1280-56-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1280-57-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1280-59-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1280-61-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1280-63-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1280-65-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1280-69-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1280-71-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1280-75-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1280-77-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1280-79-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1280-81-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1280-83-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1280-85-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1280-87-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1280-89-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1280-93-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1280-95-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1280-91-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1280-73-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1280-67-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1280-97-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1280-98-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB