fd47fb481e1605a01bbbb3f1aeb5c876f46212a6c9e1c0211353bad7b5626e04

Analysis

max time kernel
141s
max time network
171s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
19-10-2022 17:53

Target

fd47fb481e1605a01bbbb3f1aeb5c876f46212a6c9e1c0211353bad7b5626e04.exe
Size

58KB
MD5

a22c5165a5b0af680869673248edfff0
SHA1

ca7944f5b5572be2a2a62ff00e68f3cfed798a85
SHA256

fd47fb481e1605a01bbbb3f1aeb5c876f46212a6c9e1c0211353bad7b5626e04
SHA512

beaa67fef4489dfb5249993995b5a84857ad00a0a6c74355da19e87d00592bf0b9a4e8d3e557831fa9d978acd89d214c139bb064222f15b948710eb5cbe67f3e
SSDEEP

1536:tHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVtsYlh:tHoLde/OgV432UcP39hXJZnjlh

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/1300-132-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral2/memory/1300-133-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	fd47fb481e1605a01bbbb3f1aeb5c876f46212a6c9e1c0211353bad7b5626e04.exe

C:\Users\Admin\AppData\Local\Temp\fd47fb481e1605a01bbbb3f1aeb5c876f46212a6c9e1c0211353bad7b5626e04.exe
"C:\Users\Admin\AppData\Local\Temp\fd47fb481e1605a01bbbb3f1aeb5c876f46212a6c9e1c0211353bad7b5626e04.exe"
1⤵
- Drops file in Windows directory
PID:1300

memory/1300-132-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/1300-133-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download