5cf5cbd49340f2577f42644c0d3e85a58853f9053910fd6b9e898b5c4cca6e5b

Analysis

max time kernel
41s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
20/10/2022, 18:02

Target

5cf5cbd49340f2577f42644c0d3e85a58853f9053910fd6b9e898b5c4cca6e5b.exe
Size

66KB
MD5

a01ecf590bac062831a32a0ccf5190b0
SHA1

11f00cc78957b0d079a9ff09f6dcd323220250e1
SHA256

5cf5cbd49340f2577f42644c0d3e85a58853f9053910fd6b9e898b5c4cca6e5b
SHA512

551749925c2f28b74d763bc4aaa2f5537743af12d5412994919891b3218c0ef91c16c72dbb27451d6e1a767e8394e1b8ac708b90035b246bac6856978c7f2a58
SSDEEP

1536:tHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVtWc++4mP:tHoLde/OgV432UcP39hXJZnWcPT

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1688-54-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral1/memory/1688-55-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	5cf5cbd49340f2577f42644c0d3e85a58853f9053910fd6b9e898b5c4cca6e5b.exe

C:\Users\Admin\AppData\Local\Temp\5cf5cbd49340f2577f42644c0d3e85a58853f9053910fd6b9e898b5c4cca6e5b.exe
"C:\Users\Admin\AppData\Local\Temp\5cf5cbd49340f2577f42644c0d3e85a58853f9053910fd6b9e898b5c4cca6e5b.exe"
1⤵
- Drops file in Windows directory
PID:1688

memory/1688-54-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/1688-55-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download