Analysis
-
max time kernel
43s -
max time network
47s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
23/11/2022, 19:52
General
-
Target
c66056c8b44fa607405257ee4d62e3501b6813ba89e6cfe0b02ffc34477c771d.exe
-
Size
992KB
-
MD5
97c4fad6f0d8f885f573bd33206b107b
-
SHA1
4e16d4ed0e94bdf912c3b000299e649d7819a457
-
SHA256
c66056c8b44fa607405257ee4d62e3501b6813ba89e6cfe0b02ffc34477c771d
-
SHA512
5fc12ae2e535bbfe34bf43f72c63a6ee87c6b41f69650f18c636836cb371e5f1f4baa9a326f9b17d6745ef740c82d93b08704b3f819db19fbd0f71286c8a93f1
-
SSDEEP
24576:emgKbxMe5jgHDLgPjlcrR/TR4pJbe1idbUy:e1eUfgPxWR4zbHR
Score
8/10
Malware Config
Signatures
-
UPX packed file 24 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c66056c8b44fa607405257ee4d62e3501b6813ba89e6cfe0b02ffc34477c771d.exe"C:\Users\Admin\AppData\Local\Temp\c66056c8b44fa607405257ee4d62e3501b6813ba89e6cfe0b02ffc34477c771d.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB