Analysis

  • max time kernel
    185s
  • max time network
    201s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/11/2022, 12:09

General

  • Target

    4c7b9d03a2ada8462c1aa24d6a9828a0f8ce26c9d2ef7c6e5aaa1aa6d115050b.exe

  • Size

    593KB

  • MD5

    2437b58b253f315c2d997a05269b1f41

  • SHA1

    1292c03e5cea0b98d84bf519d0c5882a78635b70

  • SHA256

    4c7b9d03a2ada8462c1aa24d6a9828a0f8ce26c9d2ef7c6e5aaa1aa6d115050b

  • SHA512

    1612b186f175230bec130345f19d3dd64da59538b99eab777608b498ed1607c11f830602c8b18b8d419b16142000396c6c9e441c81fedf7df8244f2b6bccdac1

  • SSDEEP

    12288:V+cVnXb9TlGrV6ZuW1bGy2BbwM5yIz1XMTAHXp3UCH4gsVLx:V+cZRQrV6ZnxGy2NwPIBrXp3H41v

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 26 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4c7b9d03a2ada8462c1aa24d6a9828a0f8ce26c9d2ef7c6e5aaa1aa6d115050b.exe
    "C:\Users\Admin\AppData\Local\Temp\4c7b9d03a2ada8462c1aa24d6a9828a0f8ce26c9d2ef7c6e5aaa1aa6d115050b.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1168

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1168-132-0x0000000000400000-0x0000000000543000-memory.dmp

    Filesize

    1.3MB

  • memory/1168-133-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1168-134-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1168-135-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1168-137-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1168-139-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1168-143-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1168-141-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1168-145-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1168-151-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1168-149-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1168-147-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1168-153-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1168-155-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1168-157-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1168-159-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1168-161-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1168-163-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1168-165-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1168-167-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1168-169-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1168-171-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1168-173-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1168-175-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1168-176-0x0000000000400000-0x0000000000543000-memory.dmp

    Filesize

    1.3MB

  • memory/1168-177-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB