Analysis

  • max time kernel
    94s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-10-2022 17:37

General

  • Target

    9019796f02e503f537f28b9b1de27685cd0cd39dff6b8f8bc52fb4f722c2393b.exe

  • Size

    157KB

  • MD5

    a16c9ddd085416923d2350e52b4b3b20

  • SHA1

    10ad476a29968518643ed6eedc981d01b5e82d12

  • SHA256

    9019796f02e503f537f28b9b1de27685cd0cd39dff6b8f8bc52fb4f722c2393b

  • SHA512

    2b1b716b46df15621aab84d5bf7c20dc7e7f7abdb528918ae9e40c7bdf717c713949df84ef73763989f363b41e5de1ac7df902b199c43c3e9f0cfb62668d7f95

  • SSDEEP

    3072:yxTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tAvnkzkuI+:02pdqfv2IPOGfXf5ovWvakG

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9019796f02e503f537f28b9b1de27685cd0cd39dff6b8f8bc52fb4f722c2393b.exe
    "C:\Users\Admin\AppData\Local\Temp\9019796f02e503f537f28b9b1de27685cd0cd39dff6b8f8bc52fb4f722c2393b.exe"
    1⤵
    • Drops file in Windows directory
    PID:1396

Network

    No results found
  • 20.42.65.85:443
    322 B
    7
  • 104.80.225.205:443
    322 B
    7
  • 95.101.78.106:80
    322 B
    7
  • 87.248.202.1:80
    322 B
    7
  • 87.248.202.1:80
    322 B
    7
No results found

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1396-132-0x0000000000400000-0x0000000000428000-memory.dmp

    Filesize

    160KB

  • memory/1396-133-0x0000000000400000-0x0000000000428000-memory.dmp

    Filesize

    160KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.