b0c1a563b9d13d8abd05fed4bbf4b77375b2ba91d4009b7dd200ed484f130dde

Analysis

max time kernel
3s
max time network
31s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 21:22

Target

b0c1a563b9d13d8abd05fed4bbf4b77375b2ba91d4009b7dd200ed484f130dde.exe
Size

59KB
MD5

52b4e7ba17166d671f1ad79bb8d25ac0
SHA1

0f69f92ebdf9ef516f8026a19f179e483b27b172
SHA256

b0c1a563b9d13d8abd05fed4bbf4b77375b2ba91d4009b7dd200ed484f130dde
SHA512

696b9a7b735fa4100673bb7fa5671a1b29680632f12811904f13a8cbafcbd026ec23a71e610d8364b41994bf18badfee96fd20e547ec565b7696206b751d7cf3
SSDEEP

1536:tHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVtS6Z5gN2:tHoLde/OgV432UcP39hXJZnS604

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
behavioral1/memory/1416-54-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral1/memory/1416-55-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

Processes:

b0c1a563b9d13d8abd05fed4bbf4b77375b2ba91d4009b7dd200ed484f130dde.exe

description ioc process

File created C:\Windows\dextor32.exe b0c1a563b9d13d8abd05fed4bbf4b77375b2ba91d4009b7dd200ed484f130dde.exe

description	ioc	process
File created	C:\Windows\dextor32.exe	b0c1a563b9d13d8abd05fed4bbf4b77375b2ba91d4009b7dd200ed484f130dde.exe

C:\Users\Admin\AppData\Local\Temp\b0c1a563b9d13d8abd05fed4bbf4b77375b2ba91d4009b7dd200ed484f130dde.exe
"C:\Users\Admin\AppData\Local\Temp\b0c1a563b9d13d8abd05fed4bbf4b77375b2ba91d4009b7dd200ed484f130dde.exe"
1⤵
- Drops file in Windows directory
PID:1416

memory/1416-54-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/1416-55-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download