b7abc1aa87c2b47236d19c5890bf7f09ccc274c99fe90fb2badbdb98ac6f3026

Analysis

max time kernel
7s
max time network
31s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 21:22

Target

b7abc1aa87c2b47236d19c5890bf7f09ccc274c99fe90fb2badbdb98ac6f3026.exe
Size

57KB
MD5

4ad554eaa74018840e04e7f106502dc0
SHA1

bc471890caae953394f6cff9a8978f80489eaa9a
SHA256

b7abc1aa87c2b47236d19c5890bf7f09ccc274c99fe90fb2badbdb98ac6f3026
SHA512

1d7bc82de43b02f508d5ddede5c705363f899b533a98e46ac8fbf60048f68114637594c4ad2ca818e8339f5d36d78826e66735db450db3b50f0fd7d82d50777a
SSDEEP

1536:tHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVtKK:tHoLde/OgV432UcP39hXJZnZ

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
behavioral1/memory/1324-54-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral1/memory/1324-55-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

Processes:

b7abc1aa87c2b47236d19c5890bf7f09ccc274c99fe90fb2badbdb98ac6f3026.exe

description ioc process

File created C:\Windows\dextor32.exe b7abc1aa87c2b47236d19c5890bf7f09ccc274c99fe90fb2badbdb98ac6f3026.exe

description	ioc	process
File created	C:\Windows\dextor32.exe	b7abc1aa87c2b47236d19c5890bf7f09ccc274c99fe90fb2badbdb98ac6f3026.exe

C:\Users\Admin\AppData\Local\Temp\b7abc1aa87c2b47236d19c5890bf7f09ccc274c99fe90fb2badbdb98ac6f3026.exe
"C:\Users\Admin\AppData\Local\Temp\b7abc1aa87c2b47236d19c5890bf7f09ccc274c99fe90fb2badbdb98ac6f3026.exe"
1⤵
- Drops file in Windows directory
PID:1324

memory/1324-54-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/1324-55-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download