b8844759ab780199fd952661e75c99fc5e8e201cf7313ba31856d2a039321547

Analysis

max time kernel
40s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
20-10-2022 17:53

Target

b8844759ab780199fd952661e75c99fc5e8e201cf7313ba31856d2a039321547.exe
Size

68KB
MD5

a04c7e2d3f5e8849a7b33328d5301a40
SHA1

9ee0f284d4139d1b9060628ed8ff6d6c521dbd29
SHA256

b8844759ab780199fd952661e75c99fc5e8e201cf7313ba31856d2a039321547
SHA512

61581d2837c3430e46308d0f61306bc707ec8f06ef2325b24501f6ab97ca7618318b80b3f8c11e6e1748f1b2f29402c7231c5ab47dc6c4d1e07475a9bdf3ff01
SSDEEP

1536:tHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVtWc++JR/YFn:tHoLde/OgV432UcP39hXJZnWcPJe9

Score

8^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/860-54-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral1/memory/860-55-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral1/memory/860-56-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	b8844759ab780199fd952661e75c99fc5e8e201cf7313ba31856d2a039321547.exe

C:\Users\Admin\AppData\Local\Temp\b8844759ab780199fd952661e75c99fc5e8e201cf7313ba31856d2a039321547.exe
"C:\Users\Admin\AppData\Local\Temp\b8844759ab780199fd952661e75c99fc5e8e201cf7313ba31856d2a039321547.exe"
1⤵
- Drops file in Windows directory
PID:860

memory/860-54-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/860-55-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/860-56-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download