0f5f1a9d5ae144fe76e26c9aae340f3618e7ede3323dab656837a4b15615b32d

Analysis

max time kernel
143s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
20-10-2022 14:16

Target

0f5f1a9d5ae144fe76e26c9aae340f3618e7ede3323dab656837a4b15615b32d.exe
Size

1.4MB
MD5

90520fb40d2377d9198abf675a58cb2f
SHA1

8520349c88fbd8f5dcd39d83cac1242d03df3a78
SHA256

0f5f1a9d5ae144fe76e26c9aae340f3618e7ede3323dab656837a4b15615b32d
SHA512

cd70a0906bab9a346cdc695a40e43d33a9d9b63c9e554ef8dfc2bd304d18daf4e3845ce28a93fab26acc4d410f8239247785acdfed29598f109077014a6e2c29
SSDEEP

24576:kSO6KSlPSI1k/421jrM7Dzx/GgEMdkPu41u9NWsXoFkzDMG9216hh9Jiw:kJ63SIK42lrM/zxD6uxXo+Nc2Ji

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4928-132-0x0000000000400000-0x0000000000769000-memory.dmp	upx
behavioral2/memory/4928-133-0x0000000000400000-0x0000000000769000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4928	0f5f1a9d5ae144fe76e26c9aae340f3618e7ede3323dab656837a4b15615b32d.exe
4928	0f5f1a9d5ae144fe76e26c9aae340f3618e7ede3323dab656837a4b15615b32d.exe

C:\Users\Admin\AppData\Local\Temp\0f5f1a9d5ae144fe76e26c9aae340f3618e7ede3323dab656837a4b15615b32d.exe
"C:\Users\Admin\AppData\Local\Temp\0f5f1a9d5ae144fe76e26c9aae340f3618e7ede3323dab656837a4b15615b32d.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4928

memory/4928-132-0x0000000000400000-0x0000000000769000-memory.dmp

Filesize
3.4MB

Download
memory/4928-133-0x0000000000400000-0x0000000000769000-memory.dmp

Filesize
3.4MB

Download