Analysis

  • max time kernel
    151s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/11/2022, 13:01

General

  • Target

    fece8169175af380176818bad1cdb2198c6d3d6d2e636b41cf1ae0e05fb47dfe.exe

  • Size

    243KB

  • MD5

    229b477d67ef6a0773039450588c2040

  • SHA1

    f553c67fc5be628619ef3ac0dfcc38722dac2129

  • SHA256

    fece8169175af380176818bad1cdb2198c6d3d6d2e636b41cf1ae0e05fb47dfe

  • SHA512

    e05c407e9a67029d506751f7e1aad754ea375ad3e5f3ddd8d180ba93511e63446c97309c569da31d73578784114686fd26fe93438da80a4bf000e9c551675705

  • SSDEEP

    3072:R06TPH0SrN3IHDGKGR9oKpPCR3lH1akXDMOEkXy0fgHOy7IZWIt/Te83bg:nrN3IHDGKy95pe3lMy/EA2uugt7e83bg

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fece8169175af380176818bad1cdb2198c6d3d6d2e636b41cf1ae0e05fb47dfe.exe
    "C:\Users\Admin\AppData\Local\Temp\fece8169175af380176818bad1cdb2198c6d3d6d2e636b41cf1ae0e05fb47dfe.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:4208

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4208-132-0x0000000000DB0000-0x0000000000E6A000-memory.dmp

    Filesize

    744KB

  • memory/4208-133-0x0000000000DB0000-0x0000000000E6A000-memory.dmp

    Filesize

    744KB