Analysis
-
max time kernel
149s -
max time network
167s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
28/10/2022, 17:59
General
-
Target
aa50601fb7f0ade8ccde50547421ac7876ebf61d46fda5c03dcd8ae3bfdb886b.exe
-
Size
165KB
-
MD5
0b7cf10a9e713cc134257923a9b48dbe
-
SHA1
35ac5f7f7a3b279ff8df823d8c4646fe887a2e09
-
SHA256
aa50601fb7f0ade8ccde50547421ac7876ebf61d46fda5c03dcd8ae3bfdb886b
-
SHA512
3d217d8904c38645a416390344165ce260f41bfd0b4f0c86e553add54070cfc0e543e8cdbb1772d218f411af2d62b1a4549207f3994d0d0aac5284dae09e24ac
-
SSDEEP
1536:tCFjZHdOUPPiCWZz+i8Duyc92nJamTfLn0RJp6/uzPbAuR8J:wFpwUniCWMid92nJamTb0Emj8
Score
8/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\aa50601fb7f0ade8ccde50547421ac7876ebf61d46fda5c03dcd8ae3bfdb886b.exe"C:\Users\Admin\AppData\Local\Temp\aa50601fb7f0ade8ccde50547421ac7876ebf61d46fda5c03dcd8ae3bfdb886b.exe"2⤵
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
248KB
-
Filesize
64KB
-
Filesize
104KB
-
Filesize
96KB