Analysis

  • max time kernel
    149s
  • max time network
    162s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/10/2022, 08:32

General

  • Target

    0604ef5cefd3cfab12c676526777e15d78065a73d2517294bc0671018e54df62.exe

  • Size

    171KB

  • MD5

    a3271a9d91d0b863031b05e0b903b2c8

  • SHA1

    95236153139783efce4b63fbe20816a74d7173ce

  • SHA256

    0604ef5cefd3cfab12c676526777e15d78065a73d2517294bc0671018e54df62

  • SHA512

    af955f6ad969dd8354278a027c5e1528adf18f6e4ec6ef11a2e6cb886ef6ae16e68adfb40c0755727e8ed66c306881515ee0b614c18dcd6e7aed0dc85145d710

  • SSDEEP

    3072:NwwcwLBQQIIEyFmc8BZniEC+kL62L+1KWqt7tR5OTNL5TE1ZDUI/GWRo2rXfZD:Sj44IEyFBInpCV62ayxr5ORdTE1dUI+I

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0604ef5cefd3cfab12c676526777e15d78065a73d2517294bc0671018e54df62.exe
    "C:\Users\Admin\AppData\Local\Temp\0604ef5cefd3cfab12c676526777e15d78065a73d2517294bc0671018e54df62.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1468

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1468-132-0x0000000000400000-0x0000000000466000-memory.dmp

          Filesize

          408KB

        • memory/1468-133-0x0000000000400000-0x0000000000466000-memory.dmp

          Filesize

          408KB