7d2b7e5b7837d70f14e67d7c5a9db23d0094bd332f961319a6c9c0391034385f

Analysis

max time kernel
129s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
30-10-2022 09:37

Target

7d2b7e5b7837d70f14e67d7c5a9db23d0094bd332f961319a6c9c0391034385f.exe
Size

68KB
MD5

a298fb47472e522d1a861bee7e47bc70
SHA1

f41c326fc0b873237f9a197bdd3a977f4cf98108
SHA256

7d2b7e5b7837d70f14e67d7c5a9db23d0094bd332f961319a6c9c0391034385f
SHA512

94c9a1285468845842b4e5508024e5f74e4f840f15673e259a3ac8851b56fa14379d3d1a1a040a7e87560fd20269a2999c217e0b85322ec932eda418ef91d948
SSDEEP

1536:tHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVtWc++4yib:tHoLde/OgV432UcP39hXJZnWcP4y6

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4980-132-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral2/memory/4980-133-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	7d2b7e5b7837d70f14e67d7c5a9db23d0094bd332f961319a6c9c0391034385f.exe

C:\Users\Admin\AppData\Local\Temp\7d2b7e5b7837d70f14e67d7c5a9db23d0094bd332f961319a6c9c0391034385f.exe
"C:\Users\Admin\AppData\Local\Temp\7d2b7e5b7837d70f14e67d7c5a9db23d0094bd332f961319a6c9c0391034385f.exe"
1⤵
- Drops file in Windows directory
PID:4980

memory/4980-132-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/4980-133-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download