Analysis

  • max time kernel
    44s
  • max time network
    49s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2022 20:19

General

  • Target

    2e017a4f72785cf7ee3146655aa2af3a16a765e8e6fb1a3a5ceca57655bc2480.exe

  • Size

    5.3MB

  • MD5

    6545966a9b0cc88035350ebb63a893fa

  • SHA1

    ee4415f90c200420fde0899b8361619ab97ed4ea

  • SHA256

    2e017a4f72785cf7ee3146655aa2af3a16a765e8e6fb1a3a5ceca57655bc2480

  • SHA512

    1b68cd62165007bcb4ea3f89abb5f77bde2190f601c976d8abda81c47dca5e1a34da06b6b25bdc898848755117f7313a3975952641bb819259ed41fbdd6f9d88

  • SSDEEP

    98304:6lfRrYl9jPjKWEhEp8XOCInk1Ced/4SvtiFeaa+gHRCHKjfm8BNW7ZkUrBMESnLL:ERi97jP8+xzedwSvMF2DH0Sfm8B0FE6T

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2e017a4f72785cf7ee3146655aa2af3a16a765e8e6fb1a3a5ceca57655bc2480.exe
    "C:\Users\Admin\AppData\Local\Temp\2e017a4f72785cf7ee3146655aa2af3a16a765e8e6fb1a3a5ceca57655bc2480.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1724-54-0x0000000074B51000-0x0000000074B53000-memory.dmp

    Filesize

    8KB

  • memory/1724-55-0x0000000000400000-0x00000000009C8000-memory.dmp

    Filesize

    5.8MB

  • memory/1724-56-0x0000000000400000-0x00000000009C8000-memory.dmp

    Filesize

    5.8MB