2b40a507175e34aba183d94c49a7001970f4dce50795e9c22dd4c877dd2463b9

Analysis

max time kernel
43s
max time network
55s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
29/10/2022, 19:45

Target

2b40a507175e34aba183d94c49a7001970f4dce50795e9c22dd4c877dd2463b9.exe
Size

27KB
MD5

83d03965ad063505600e4e3aad235330
SHA1

9839b955dc7b86716f90f71666616fe9918f2787
SHA256

2b40a507175e34aba183d94c49a7001970f4dce50795e9c22dd4c877dd2463b9
SHA512

dfbd5d36b6a8527053915b56d44f6841aff62c0641a1b57cf29d61b6e181da17fac1f8e6693b9d2e7a597761b3e6dc51592c08e5d05905cc4a057686279aacd6
SSDEEP

768:D27aw42rBazw4ajFeH/U0AlDG9xKW1GRIF:D27H426bWFI/KlDGTKWkIF

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1584-54-0x0000000000400000-0x000000000041C000-memory.dmp	upx
behavioral1/memory/1584-55-0x0000000000400000-0x000000000041C000-memory.dmp	upx

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
1584	2b40a507175e34aba183d94c49a7001970f4dce50795e9c22dd4c877dd2463b9.exe

C:\Users\Admin\AppData\Local\Temp\2b40a507175e34aba183d94c49a7001970f4dce50795e9c22dd4c877dd2463b9.exe
"C:\Users\Admin\AppData\Local\Temp\2b40a507175e34aba183d94c49a7001970f4dce50795e9c22dd4c877dd2463b9.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1584

memory/1584-54-0x0000000000400000-0x000000000041C000-memory.dmp

Filesize
112KB

Download
memory/1584-55-0x0000000000400000-0x000000000041C000-memory.dmp

Filesize
112KB

Download