Analysis
-
max time kernel
146s -
max time network
190s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
27/11/2022, 12:05
General
-
Target
cd5904351ed6b6130e25323a14adfc1d3c82f9f86d1f131c2f9cf54faee00c92.exe
-
Size
396KB
-
MD5
5aad97aae3e7abda08783282028a2277
-
SHA1
a60e8f6482454e444e617a68929161a1443711e1
-
SHA256
cd5904351ed6b6130e25323a14adfc1d3c82f9f86d1f131c2f9cf54faee00c92
-
SHA512
25948a034e3eca7dfe176809cccc6539c0fb67a3cab599e3c92859b02daa27473d66667259bc19a2b090dae433b076bd90c66f1342cda97c84d0cf56b2f74364
-
SSDEEP
12288:a4FZl18bqQgtVhS1iK/wNBQtJ9TG0yTJofHPuQ:a88bqQkVwILQ5TGnWHPuQ
Score
8/10
Malware Config
Signatures
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of SetThreadContext 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\cd5904351ed6b6130e25323a14adfc1d3c82f9f86d1f131c2f9cf54faee00c92.exe"C:\Users\Admin\AppData\Local\Temp\cd5904351ed6b6130e25323a14adfc1d3c82f9f86d1f131c2f9cf54faee00c92.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\svchost.exesvchost.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
268KB
-
Filesize
548KB
-
Filesize
548KB
-
Filesize
316KB
-
Filesize
316KB