Analysis

  • max time kernel
    45s
  • max time network
    69s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    03/11/2022, 10:51

General

  • Target

    98d1cf785847dc68675aee172f00faadb36172ef9f3de74e2d1574713e2bf8be.exe

  • Size

    719KB

  • MD5

    166066b41777e2f7404caf822b43f828

  • SHA1

    6887a536737d5492a8d80e57571256640bdecf32

  • SHA256

    98d1cf785847dc68675aee172f00faadb36172ef9f3de74e2d1574713e2bf8be

  • SHA512

    46896ce21580f43be4a3149d54c1de6be28b2070663e00f2b87dcc79bbe99bb7215923e28adb357480a6f4dcfcebe8fd0b6b0eab4cd516c4bb516381d1e52038

  • SSDEEP

    12288:/nopq8C7019FYMDrv+lLp98LoqafMoEyniqojjR4xxoghbXpt9HzT/2cIhr:/YfCY1fZTwLb8EkoEmtYFypxXpv/ec

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\98d1cf785847dc68675aee172f00faadb36172ef9f3de74e2d1574713e2bf8be.exe
    "C:\Users\Admin\AppData\Local\Temp\98d1cf785847dc68675aee172f00faadb36172ef9f3de74e2d1574713e2bf8be.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2024

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2024-54-0x00000000759F1000-0x00000000759F3000-memory.dmp

          Filesize

          8KB

        • memory/2024-55-0x0000000000400000-0x0000000000637000-memory.dmp

          Filesize

          2.2MB

        • memory/2024-56-0x0000000000400000-0x0000000000637000-memory.dmp

          Filesize

          2.2MB

        • memory/2024-57-0x0000000000400000-0x0000000000637000-memory.dmp

          Filesize

          2.2MB

        • memory/2024-58-0x0000000000400000-0x0000000000637000-memory.dmp

          Filesize

          2.2MB

        • memory/2024-59-0x0000000000660000-0x0000000000696000-memory.dmp

          Filesize

          216KB

        • memory/2024-60-0x0000000002030000-0x0000000002043000-memory.dmp

          Filesize

          76KB

        • memory/2024-61-0x0000000000400000-0x0000000000637000-memory.dmp

          Filesize

          2.2MB

        • memory/2024-63-0x0000000000400000-0x0000000000637000-memory.dmp

          Filesize

          2.2MB

        • memory/2024-64-0x0000000000660000-0x0000000000696000-memory.dmp

          Filesize

          216KB

        • memory/2024-65-0x0000000000400000-0x0000000000637000-memory.dmp

          Filesize

          2.2MB