Analysis

  • max time kernel
    139s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 20:19

General

  • Target

    2e017a4f72785cf7ee3146655aa2af3a16a765e8e6fb1a3a5ceca57655bc2480.exe

  • Size

    5.3MB

  • MD5

    6545966a9b0cc88035350ebb63a893fa

  • SHA1

    ee4415f90c200420fde0899b8361619ab97ed4ea

  • SHA256

    2e017a4f72785cf7ee3146655aa2af3a16a765e8e6fb1a3a5ceca57655bc2480

  • SHA512

    1b68cd62165007bcb4ea3f89abb5f77bde2190f601c976d8abda81c47dca5e1a34da06b6b25bdc898848755117f7313a3975952641bb819259ed41fbdd6f9d88

  • SSDEEP

    98304:6lfRrYl9jPjKWEhEp8XOCInk1Ced/4SvtiFeaa+gHRCHKjfm8BNW7ZkUrBMESnLL:ERi97jP8+xzedwSvMF2DH0Sfm8B0FE6T

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2e017a4f72785cf7ee3146655aa2af3a16a765e8e6fb1a3a5ceca57655bc2480.exe
    "C:\Users\Admin\AppData\Local\Temp\2e017a4f72785cf7ee3146655aa2af3a16a765e8e6fb1a3a5ceca57655bc2480.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2416-132-0x0000000000400000-0x00000000009C8000-memory.dmp

    Filesize

    5.8MB

  • memory/2416-133-0x0000000000400000-0x00000000009C8000-memory.dmp

    Filesize

    5.8MB