Analysis

  • max time kernel
    161s
  • max time network
    198s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/11/2022, 23:07

General

  • Target

    80c8a4612765aedb3c33da7c3c41bc3f6478bc638b672ad520e5ec436dae315d.exe

  • Size

    1.7MB

  • MD5

    5a8bad6cd918c7126a866100c0322b5e

  • SHA1

    95d3ce688a3d58c56406ff05672e70b341a0fd49

  • SHA256

    80c8a4612765aedb3c33da7c3c41bc3f6478bc638b672ad520e5ec436dae315d

  • SHA512

    d2093efe03bba79bca7e0ca71a50d127648824cc0096b5cde1819e77ff2a81134b33af5e5ecfa58ffa4c17a438adda101ef40ab16e2374abc5eb25dab208b800

  • SSDEEP

    49152:UDs0WV/nWA/aGRnG+HGgD2PYmbAvXwjiYNfP:gOva6xHrymXqiYF

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\80c8a4612765aedb3c33da7c3c41bc3f6478bc638b672ad520e5ec436dae315d.exe
    "C:\Users\Admin\AppData\Local\Temp\80c8a4612765aedb3c33da7c3c41bc3f6478bc638b672ad520e5ec436dae315d.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1432

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1432-132-0x0000000000400000-0x0000000000AAA000-memory.dmp

    Filesize

    6.7MB

  • memory/1432-133-0x0000000000400000-0x0000000000AAA000-memory.dmp

    Filesize

    6.7MB