Analysis

  • max time kernel
    91s
  • max time network
    139s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/10/2022, 21:41

General

  • Target

    541f01d01670b3bbf98803952c66042350e7de5876463c0d389fabb5a471e489.exe

  • Size

    422KB

  • MD5

    2afa668f1f36b4d98f4f1fff72348582

  • SHA1

    6e7a69d0e704eab7235b4b53e682c4086052b704

  • SHA256

    541f01d01670b3bbf98803952c66042350e7de5876463c0d389fabb5a471e489

  • SHA512

    115ac339c003774666551e4a66d358231a89279bb0096190a9a8bfd64611ee351a952587b54399536bdf774fcb41b25529c5ac28cde7c9a696aa09a235500029

  • SSDEEP

    12288:jjqHIgLoS4CH3jNwW4+qRiHqI1+bLlMVONF18tLtCkFSWoS+:aFhNX4divYMVOL18tYkFSf

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\541f01d01670b3bbf98803952c66042350e7de5876463c0d389fabb5a471e489.exe
    "C:\Users\Admin\AppData\Local\Temp\541f01d01670b3bbf98803952c66042350e7de5876463c0d389fabb5a471e489.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2200

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2200-132-0x0000000000400000-0x0000000000556000-memory.dmp

    Filesize

    1.3MB

  • memory/2200-133-0x0000000000400000-0x0000000000556000-memory.dmp

    Filesize

    1.3MB