Analysis

  • max time kernel
    42s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2022 20:28

General

  • Target

    e1cfe084d0031d7c6a8769da715e1091de977af12705c55f274fdeb6471143e2.exe

  • Size

    1.3MB

  • MD5

    3daab888e389f149531df91ff5772d75

  • SHA1

    b04955d00f082aaca3703bfc272db13c561e76b7

  • SHA256

    e1cfe084d0031d7c6a8769da715e1091de977af12705c55f274fdeb6471143e2

  • SHA512

    f9d2028037b63525fb190ad95d8488e5ead71b568213f9100a5ea99253115c9b2d69684228220bde7c463a023ad6325457a8575eca2bca166812e6e189b86a40

  • SSDEEP

    24576:LgTdRMcj4bFRbJxo9blGorDrMmOGb8idIuBT/dc7QUWjvYzLpqAVwSkp8:AzqbFpg9RGWMmbIi6CarWeLpqzSk

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e1cfe084d0031d7c6a8769da715e1091de977af12705c55f274fdeb6471143e2.exe
    "C:\Users\Admin\AppData\Local\Temp\e1cfe084d0031d7c6a8769da715e1091de977af12705c55f274fdeb6471143e2.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1088-54-0x0000000075241000-0x0000000075243000-memory.dmp

    Filesize

    8KB

  • memory/1088-55-0x0000000000400000-0x00000000006E4000-memory.dmp

    Filesize

    2.9MB

  • memory/1088-56-0x0000000000400000-0x00000000006E4000-memory.dmp

    Filesize

    2.9MB

  • memory/1088-57-0x0000000000400000-0x00000000006E4000-memory.dmp

    Filesize

    2.9MB

  • memory/1088-58-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1088-59-0x0000000000400000-0x00000000006E4000-memory.dmp

    Filesize

    2.9MB

  • memory/1088-60-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB