Analysis

  • max time kernel
    158s
  • max time network
    162s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 09:53

General

  • Target

    f34bc305e08b55ca64d77e6a5111eeca440f1c87ebe9d2224cc6ea40f2fa256c.exe

  • Size

    19KB

  • MD5

    45be791cfcd64f76a0b572906aa0c00f

  • SHA1

    05ec075afa52a8c91961a525805e00ec2c66208a

  • SHA256

    f34bc305e08b55ca64d77e6a5111eeca440f1c87ebe9d2224cc6ea40f2fa256c

  • SHA512

    da76dc95aeaa3911d75f5ca51a0d8f92a6dbb76a1d5acbe81fde0907b9b7b064c528f39ea13987729a0a9c2538bb9855fedd4eeb472343e791ac2479dbfecadd

  • SSDEEP

    384:B4oP6PC7+ExAE1LhE8KJFUQRP2ZugueuymSt3epictBoHM7IGG+b+rzAb0:KQp77xp1LYlRuZug790pictBos7IL+b0

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f34bc305e08b55ca64d77e6a5111eeca440f1c87ebe9d2224cc6ea40f2fa256c.exe
    "C:\Users\Admin\AppData\Local\Temp\f34bc305e08b55ca64d77e6a5111eeca440f1c87ebe9d2224cc6ea40f2fa256c.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1000

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\elementgj.dll

    Filesize

    26KB

    MD5

    55cca4bbf01e2004f5e10271c1010fb9

    SHA1

    eb1b5c0394465f49f888093ccbe7f20dc94e6fdd

    SHA256

    8ced1b220c852ae0086c977d97efed44783c079b9c5695a10c6d3a7dd1d8d11a

    SHA512

    6200eb52f2f0ab7f22781464af040d7991deb88cb9df8df23fad831cb00c90a67bb67e33a84f84dc15a8f17d9701eda92aaab57c2a2da6695f12b218724e439d

  • memory/1000-132-0x0000000000400000-0x0000000000411000-memory.dmp

    Filesize

    68KB