d912b1da9a8249cd42223abf4731de794ec019279380bbdd3e16ecb1453a0ee4

Analysis

max time kernel
56s
max time network
34s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 21:21

Target

d912b1da9a8249cd42223abf4731de794ec019279380bbdd3e16ecb1453a0ee4.exe
Size

58KB
MD5

531eefedaa5a1301657399d7f608d150
SHA1

e57f313c1acba45fb9d32031ba5703ac80366144
SHA256

d912b1da9a8249cd42223abf4731de794ec019279380bbdd3e16ecb1453a0ee4
SHA512

c45c182603a194fc8fa4f022a7431290fe76c1a04d2d4d3de4b903197062d2e1c0427676228cbe1e4e96f606c5a6d497e549ec54afcfdaff450e1889479fdec1
SSDEEP

1536:tHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVtW9t:tHoLde/OgV432UcP39hXJZnWD

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
behavioral1/memory/764-54-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral1/memory/764-55-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

Processes:

d912b1da9a8249cd42223abf4731de794ec019279380bbdd3e16ecb1453a0ee4.exe

description ioc process

File created C:\Windows\dextor32.exe d912b1da9a8249cd42223abf4731de794ec019279380bbdd3e16ecb1453a0ee4.exe

description	ioc	process
File created	C:\Windows\dextor32.exe	d912b1da9a8249cd42223abf4731de794ec019279380bbdd3e16ecb1453a0ee4.exe

C:\Users\Admin\AppData\Local\Temp\d912b1da9a8249cd42223abf4731de794ec019279380bbdd3e16ecb1453a0ee4.exe
"C:\Users\Admin\AppData\Local\Temp\d912b1da9a8249cd42223abf4731de794ec019279380bbdd3e16ecb1453a0ee4.exe"
1⤵
- Drops file in Windows directory
PID:764

memory/764-54-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/764-55-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download