f4405b95c6ecaa42d2b01ab0ed9923a88b2d4fbdac34adab30ec6eec19897a34

Analysis

max time kernel
3s
max time network
34s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 21:20

Target

f4405b95c6ecaa42d2b01ab0ed9923a88b2d4fbdac34adab30ec6eec19897a34.exe
Size

57KB
MD5

476cfbb377943cd3d26be125b351a660
SHA1

014094fa68841a5524d7608ac42f9c0824a1209d
SHA256

f4405b95c6ecaa42d2b01ab0ed9923a88b2d4fbdac34adab30ec6eec19897a34
SHA512

29be22e3902fc0a857007eb8afed520efaa349b3df715dc300f4aba38a73aafb467bc7fb7f9d86af322c07e3676167fc81e3b383337fa464ad81cccbb1ccd3e2
SSDEEP

1536:tHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVtP:tHoLde/OgV432UcP39hXJZnP

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
behavioral1/memory/1640-54-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

Processes:

f4405b95c6ecaa42d2b01ab0ed9923a88b2d4fbdac34adab30ec6eec19897a34.exe

description ioc process

File created C:\Windows\dextor32.exe f4405b95c6ecaa42d2b01ab0ed9923a88b2d4fbdac34adab30ec6eec19897a34.exe

description	ioc	process
File created	C:\Windows\dextor32.exe	f4405b95c6ecaa42d2b01ab0ed9923a88b2d4fbdac34adab30ec6eec19897a34.exe

C:\Users\Admin\AppData\Local\Temp\f4405b95c6ecaa42d2b01ab0ed9923a88b2d4fbdac34adab30ec6eec19897a34.exe
"C:\Users\Admin\AppData\Local\Temp\f4405b95c6ecaa42d2b01ab0ed9923a88b2d4fbdac34adab30ec6eec19897a34.exe"
1⤵
- Drops file in Windows directory
PID:1640

memory/1640-54-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download