1241c6363625e236e773b60ed4ee083aa989898331ad6bd598344412530c1293

Analysis

max time kernel
121s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
19/10/2022, 18:50

Target

1241c6363625e236e773b60ed4ee083aa989898331ad6bd598344412530c1293.exe
Size

67KB
MD5

a0cf4b7e5168d018e248410433f66290
SHA1

60c4918c1a6afd8b64b476311f024a1c1b0cdd96
SHA256

1241c6363625e236e773b60ed4ee083aa989898331ad6bd598344412530c1293
SHA512

9c6e885498591f4a32e3070fc7510637a88ccfe8c09bf2243bbef7426e624ddcaa40e8eeb09d3bc9ce03cbaf7e890acb507f8acf94b69964f8ef0d5bb60bb39e
SSDEEP

1536:tHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVtWc++4m678:tHoLde/OgV432UcP39hXJZnWcP+Y

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4324-132-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral2/memory/4324-133-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	1241c6363625e236e773b60ed4ee083aa989898331ad6bd598344412530c1293.exe

C:\Users\Admin\AppData\Local\Temp\1241c6363625e236e773b60ed4ee083aa989898331ad6bd598344412530c1293.exe
"C:\Users\Admin\AppData\Local\Temp\1241c6363625e236e773b60ed4ee083aa989898331ad6bd598344412530c1293.exe"
1⤵
- Drops file in Windows directory
PID:4324

memory/4324-132-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/4324-133-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download