6b8eda6f5e8cff96506c4f4404e94e0ee52d8fe1d5fc079ca491bc9b9e3b1e4d

Analysis

max time kernel
57s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
19/10/2022, 17:41

Target

6b8eda6f5e8cff96506c4f4404e94e0ee52d8fe1d5fc079ca491bc9b9e3b1e4d.exe
Size

64KB
MD5

a1136151bbfb784f34d2520a9bcd3a30
SHA1

60787d4bd3ada49fa8faf1fc4938c5f36b809765
SHA256

6b8eda6f5e8cff96506c4f4404e94e0ee52d8fe1d5fc079ca491bc9b9e3b1e4d
SHA512

7766559fa53ae3c463ec3f29be284928af62160b43cd782ad3e2ffdf6b5aae7717637dc341fd8538f16b3ec6032a770136dea2e3248917df3184a5d30249451c
SSDEEP

1536:KHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6k2L5baULj:KHoLde/OgV432UcP39hvF+8j

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1152-54-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral1/memory/1152-55-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\driv64.exe	6b8eda6f5e8cff96506c4f4404e94e0ee52d8fe1d5fc079ca491bc9b9e3b1e4d.exe

C:\Users\Admin\AppData\Local\Temp\6b8eda6f5e8cff96506c4f4404e94e0ee52d8fe1d5fc079ca491bc9b9e3b1e4d.exe
"C:\Users\Admin\AppData\Local\Temp\6b8eda6f5e8cff96506c4f4404e94e0ee52d8fe1d5fc079ca491bc9b9e3b1e4d.exe"
1⤵
- Drops file in Windows directory
PID:1152

memory/1152-54-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/1152-55-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download