fa386df33efe43dd8e6cfd467e21d29b79d353fbecc29a503a32f1825ddd8249

Analysis

max time kernel
140s
max time network
167s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
30-10-2022 08:59

Target

fa386df33efe43dd8e6cfd467e21d29b79d353fbecc29a503a32f1825ddd8249.exe
Size

65KB
MD5

a2f0422fc07cfa4acbef89ebd280c810
SHA1

88a925555508cf8aab1f07291f5763198bb6fd79
SHA256

fa386df33efe43dd8e6cfd467e21d29b79d353fbecc29a503a32f1825ddd8249
SHA512

bea6b64293efcde9edb4e9116b78a6ff542a9852fc5b9460a96459d8c47f289f8f49eedf2a35e93392fdd550e7825c81fac6a7496d01d20ad7ddeeb15331dfdd
SSDEEP

1536:KHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6k2L5baULR4S:KHoLde/OgV432UcP39hvF+8R4S

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/860-132-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral2/memory/860-133-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\driv64.exe	fa386df33efe43dd8e6cfd467e21d29b79d353fbecc29a503a32f1825ddd8249.exe

C:\Users\Admin\AppData\Local\Temp\fa386df33efe43dd8e6cfd467e21d29b79d353fbecc29a503a32f1825ddd8249.exe
"C:\Users\Admin\AppData\Local\Temp\fa386df33efe43dd8e6cfd467e21d29b79d353fbecc29a503a32f1825ddd8249.exe"
1⤵
- Drops file in Windows directory
PID:860

memory/860-132-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/860-133-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download