f53d400db75af95e7026b9d12158ccfce4ca4378c034dded9c6f9093b3f6e914

Analysis

max time kernel
1s
max time network
154s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
28-10-2022 23:13

Target

f53d400db75af95e7026b9d12158ccfce4ca4378c034dded9c6f9093b3f6e914.exe
Size

1021KB
MD5

0afdd7b669ea2e28325e7c13cbde5ed0
SHA1

ede63800ba493a2d53dc8f5725ccfd28f6064485
SHA256

f53d400db75af95e7026b9d12158ccfce4ca4378c034dded9c6f9093b3f6e914
SHA512

21ed0bd0d602f73f4f945bdad2a3708fdcf5d819db96865fb154f658baea359e39542dc282ed727766c74b2599cebe1e341592096d7205de1e6cc2633d708b9a
SSDEEP

24576:/WLaIsYTqLqVcw+QNAjOLc3FTo8TVi4QkdixG:/b9YGzw+OAKgf3QG

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1620-55-0x0000000000400000-0x0000000000410000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1620	f53d400db75af95e7026b9d12158ccfce4ca4378c034dded9c6f9093b3f6e914.exe

C:\Users\Admin\AppData\Local\Temp\f53d400db75af95e7026b9d12158ccfce4ca4378c034dded9c6f9093b3f6e914.exe
"C:\Users\Admin\AppData\Local\Temp\f53d400db75af95e7026b9d12158ccfce4ca4378c034dded9c6f9093b3f6e914.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1620
- C:\Users\Admin\AppData\Local\Temp\f53d400db75af95e7026b9d12158ccfce4ca4378c034dded9c6f9093b3f6e914.exe
  C:\Users\Admin\AppData\Local\Temp\f53d400db75af95e7026b9d12158ccfce4ca4378c034dded9c6f9093b3f6e914.exe
  2⤵
  PID:1748
- C:\Users\Admin\AppData\Local\Temp\f53d400db75af95e7026b9d12158ccfce4ca4378c034dded9c6f9093b3f6e914.exe
  C:\Users\Admin\AppData\Local\Temp\f53d400db75af95e7026b9d12158ccfce4ca4378c034dded9c6f9093b3f6e914.exe
  2⤵
  PID:1100
- C:\Users\Admin\AppData\Local\Temp\f53d400db75af95e7026b9d12158ccfce4ca4378c034dded9c6f9093b3f6e914.exe
  C:\Users\Admin\AppData\Local\Temp\f53d400db75af95e7026b9d12158ccfce4ca4378c034dded9c6f9093b3f6e914.exe
  2⤵
  PID:1104

memory/1620-54-0x0000000075D01000-0x0000000075D03000-memory.dmp

Filesize
8KB

Download
memory/1620-55-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/1620-56-0x0000000000280000-0x0000000000290000-memory.dmp

Filesize
64KB

Download
memory/1620-67-0x0000000000290000-0x0000000000294000-memory.dmp

Filesize
16KB

Download
memory/1748-69-0x0000000000400000-0x0000000000646000-memory.dmp

Filesize
2.3MB

Download
memory/1748-62-0x0000000000400000-0x0000000000646000-memory.dmp

Filesize
2.3MB

Download
memory/1748-59-0x0000000000400000-0x0000000000646000-memory.dmp

Filesize
2.3MB

Download
memory/1748-65-0x0000000000400000-0x0000000000646000-memory.dmp

Filesize
2.3MB

Download
memory/1748-64-0x0000000000400000-0x0000000000646000-memory.dmp

Filesize
2.3MB

Download
memory/1748-60-0x0000000000400000-0x0000000000646000-memory.dmp

Filesize
2.3MB

Download
memory/1748-57-0x00000000001B0000-0x00000000002AA000-memory.dmp

Filesize
1000KB

Download
memory/1748-70-0x0000000000400000-0x0000000000646000-memory.dmp

Filesize
2.3MB

Download