Analysis

  • max time kernel
    86s
  • max time network
    40s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/10/2022, 22:31

General

  • Target

    27855a59bae9c1034d1b26574ea2d5efac6c15b79afc2601b7ac35058dca1b75.exe

  • Size

    1.1MB

  • MD5

    65f206b6e7f893a96c077b6e8be39ae7

  • SHA1

    c6b5c47d7ff9aae097f2b1db544ca1cd779cbe65

  • SHA256

    27855a59bae9c1034d1b26574ea2d5efac6c15b79afc2601b7ac35058dca1b75

  • SHA512

    7c4e0b24609a29fb24bee4ef32216f84f01811a2fc5ac8e90bbf4283b27eefd9ed9cd1d575f93a8642a5be5cb1d763ba78459891a5772c17af934eee663b9845

  • SSDEEP

    24576:X1qDTh5bO7vwXor2ZwAKY5J1+3qzwOqep1////r55BL7EP/7Rl////r55B7ZE//J:XA3bI2ZyY31+6zdqI////r55BL7EP/7E

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 24 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\27855a59bae9c1034d1b26574ea2d5efac6c15b79afc2601b7ac35058dca1b75.exe
    "C:\Users\Admin\AppData\Local\Temp\27855a59bae9c1034d1b26574ea2d5efac6c15b79afc2601b7ac35058dca1b75.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4856

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4856-138-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/4856-150-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/4856-164-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/4856-166-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/4856-162-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/4856-160-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/4856-158-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/4856-156-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/4856-154-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/4856-172-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/4856-174-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/4856-170-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/4856-168-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/4856-152-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/4856-148-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/4856-146-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/4856-144-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/4856-142-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/4856-140-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/4856-136-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/4856-134-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/4856-133-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/4856-132-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/4856-175-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB