85595e0c48187a9357c0385eb8aa0c15014857fcf1839ef727d02379ea1f2898

Analysis

max time kernel
182s
max time network
195s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 21:22

Target

85595e0c48187a9357c0385eb8aa0c15014857fcf1839ef727d02379ea1f2898.exe
Size

59KB
MD5

523ef47bb2bbf460063333dd33ad64b0
SHA1

28f558758991d6c80811674eba476004bcfb85da
SHA256

85595e0c48187a9357c0385eb8aa0c15014857fcf1839ef727d02379ea1f2898
SHA512

c0415232750f34117a849adc83264dce57ec97e9adbc4cd0f8650aadcf3917c2fb62e51987c82d87955765fc3fd33ce453376aef95e100ade73fd116c7dfe32c
SSDEEP

1536:tHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVtUE0N:tHoLde/OgV432UcP39hXJZnUE0N

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
behavioral2/memory/2400-132-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral2/memory/2400-133-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

Processes:

85595e0c48187a9357c0385eb8aa0c15014857fcf1839ef727d02379ea1f2898.exe

description ioc process

File created C:\Windows\dextor32.exe 85595e0c48187a9357c0385eb8aa0c15014857fcf1839ef727d02379ea1f2898.exe

description	ioc	process
File created	C:\Windows\dextor32.exe	85595e0c48187a9357c0385eb8aa0c15014857fcf1839ef727d02379ea1f2898.exe

C:\Users\Admin\AppData\Local\Temp\85595e0c48187a9357c0385eb8aa0c15014857fcf1839ef727d02379ea1f2898.exe
"C:\Users\Admin\AppData\Local\Temp\85595e0c48187a9357c0385eb8aa0c15014857fcf1839ef727d02379ea1f2898.exe"
1⤵
- Drops file in Windows directory
PID:2400

memory/2400-132-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/2400-133-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download