12b2390a7c81f5fd1bb07753f7ad5a4e3ccbc9ac49c6c4e0c85ca145a575f171

Analysis

max time kernel
22s
max time network
49s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
25-11-2022 17:42

Target

12b2390a7c81f5fd1bb07753f7ad5a4e3ccbc9ac49c6c4e0c85ca145a575f171.exe
Size

43KB
MD5

589035c5d17e250e97d7c59e92e65269
SHA1

2b4dc11dfb5ac8acf67612fdf68f2c79c3c330f6
SHA256

12b2390a7c81f5fd1bb07753f7ad5a4e3ccbc9ac49c6c4e0c85ca145a575f171
SHA512

fd70382a077caa65f020aa3573ac16ac665370387c657737df2d076470f03b87714f9315adc8267cd8d5f5306d682afe1b453662e92f0c01493b0485fc47f584
SSDEEP

768:kvAqld1pbwgRk7OOsrKTxJRrAmYnekaEWjzrepRlY:Jqld1pbwtRsmrzcNv+zr0l

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/960-55-0x0000000000400000-0x0000000000475000-memory.dmp	upx
behavioral1/memory/960-56-0x0000000000400000-0x0000000000475000-memory.dmp	upx

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\vcmon.exe	12b2390a7c81f5fd1bb07753f7ad5a4e3ccbc9ac49c6c4e0c85ca145a575f171.exe
File opened for modification	C:\Windows\SysWOW64\vcmon.exe	12b2390a7c81f5fd1bb07753f7ad5a4e3ccbc9ac49c6c4e0c85ca145a575f171.exe

C:\Users\Admin\AppData\Local\Temp\12b2390a7c81f5fd1bb07753f7ad5a4e3ccbc9ac49c6c4e0c85ca145a575f171.exe
"C:\Users\Admin\AppData\Local\Temp\12b2390a7c81f5fd1bb07753f7ad5a4e3ccbc9ac49c6c4e0c85ca145a575f171.exe"
1⤵
- Drops file in System32 directory
PID:960

memory/960-54-0x0000000076091000-0x0000000076093000-memory.dmp

Filesize
8KB

Download
memory/960-55-0x0000000000400000-0x0000000000475000-memory.dmp

Filesize
468KB

Download
memory/960-56-0x0000000000400000-0x0000000000475000-memory.dmp

Filesize
468KB

Download