1ec70ae86f799ba775f235065e5e7f9e3511a0228aff01b131353995460f2cca

Analysis

max time kernel
40s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
19-10-2022 18:47

Target

1ec70ae86f799ba775f235065e5e7f9e3511a0228aff01b131353995460f2cca.exe
Size

67KB
MD5

a1baf3f79d64355f78d5bef4f0edc920
SHA1

e43a994e837881fdb905f306537b43ae23c6345b
SHA256

1ec70ae86f799ba775f235065e5e7f9e3511a0228aff01b131353995460f2cca
SHA512

1af653a898a8f62ecb3fc5eb32f5da207b85b3112d575b88b043e973063a9f5be306326cc556ef02e989c2ea9ba6d267e3315d2e1d043a5ca4d89a6c6925e236
SSDEEP

1536:tHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVtWc++zfnJ:tHoLde/OgV432UcP39hXJZnWcPzfnJ

Score

8^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1884-54-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral1/memory/1884-55-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral1/memory/1884-56-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	1ec70ae86f799ba775f235065e5e7f9e3511a0228aff01b131353995460f2cca.exe

C:\Users\Admin\AppData\Local\Temp\1ec70ae86f799ba775f235065e5e7f9e3511a0228aff01b131353995460f2cca.exe
"C:\Users\Admin\AppData\Local\Temp\1ec70ae86f799ba775f235065e5e7f9e3511a0228aff01b131353995460f2cca.exe"
1⤵
- Drops file in Windows directory
PID:1884

memory/1884-54-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/1884-55-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/1884-56-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download