396d33ff1ae333c43dabe434dbd2a3f092455feb2067f88e460eba75828b802a

Analysis

max time kernel
104s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
30/10/2022, 09:46

Target

396d33ff1ae333c43dabe434dbd2a3f092455feb2067f88e460eba75828b802a.exe
Size

66KB
MD5

a33506c20144bc77aefc947f2e743fe0
SHA1

4b8ee8f5388b14b0ff7506bf2904fe0ebfd81abe
SHA256

396d33ff1ae333c43dabe434dbd2a3f092455feb2067f88e460eba75828b802a
SHA512

c72964898ef1b0f3913ea9bcdfb66bd0a6ac6a5b5a7a507be1796df5d092d18d58966bc861eedea1eb4aee80efc3a66ef6cfa136afef5a1a7253f3a15be9d080
SSDEEP

1536:tHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVtWc++Jd:tHoLde/OgV432UcP39hXJZnWcPJd

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/552-132-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral2/memory/552-133-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	396d33ff1ae333c43dabe434dbd2a3f092455feb2067f88e460eba75828b802a.exe

C:\Users\Admin\AppData\Local\Temp\396d33ff1ae333c43dabe434dbd2a3f092455feb2067f88e460eba75828b802a.exe
"C:\Users\Admin\AppData\Local\Temp\396d33ff1ae333c43dabe434dbd2a3f092455feb2067f88e460eba75828b802a.exe"
1⤵
- Drops file in Windows directory
PID:552

memory/552-132-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/552-133-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download