f7a2afdb66386ccf0090331c27d9257cb76cf15b3150aa3af1cca0eda3497955

Analysis

max time kernel
143s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23/11/2022, 20:22

Target

f7a2afdb66386ccf0090331c27d9257cb76cf15b3150aa3af1cca0eda3497955.exe
Size

967KB
MD5

321160d954f242b0d098a94c3722c14d
SHA1

39cb5a9a634e6234355c0ae7eda3c6b4bfed065d
SHA256

f7a2afdb66386ccf0090331c27d9257cb76cf15b3150aa3af1cca0eda3497955
SHA512

be869c35fcab446dbd083603196a65f3d8be14acb225b9892431417c296f41ee8c2468795c93f44ebe3fefb59ae83ce2dabb75ce7b23ecbed549f1049aa52953
SSDEEP

24576:HsknN1c6tfihO0lLL2klUnwgq86q4gvjVtfLWOsw3wR:Hx46XELLZunwl8PvjV4zR

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4988-132-0x0000000000400000-0x0000000000707000-memory.dmp	upx

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4988	f7a2afdb66386ccf0090331c27d9257cb76cf15b3150aa3af1cca0eda3497955.exe
4988	f7a2afdb66386ccf0090331c27d9257cb76cf15b3150aa3af1cca0eda3497955.exe

C:\Users\Admin\AppData\Local\Temp\f7a2afdb66386ccf0090331c27d9257cb76cf15b3150aa3af1cca0eda3497955.exe
"C:\Users\Admin\AppData\Local\Temp\f7a2afdb66386ccf0090331c27d9257cb76cf15b3150aa3af1cca0eda3497955.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4988

memory/4988-132-0x0000000000400000-0x0000000000707000-memory.dmp

Filesize
3.0MB

Download