157d305f19831bbe0b1a4c4df56069a234361fec11ae9c02bab77f1af641b97b

Analysis

max time kernel
35s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
27-11-2022 18:55

Target

157d305f19831bbe0b1a4c4df56069a234361fec11ae9c02bab77f1af641b97b.exe
Size

480KB
MD5

932434ecfebbf4597b2e708533c2bf1c
SHA1

b862f0aa85324dfc7dc3c51a851f1a75caf9cf5c
SHA256

157d305f19831bbe0b1a4c4df56069a234361fec11ae9c02bab77f1af641b97b
SHA512

595d259393a0ec35cda136eb26c0f26103e3981afb1ae2e92085eb39a3b5b8a3c59bb2971e66e2155842ad527d10584414ded258a046fa57b9cb535186c7977a
SSDEEP

12288:+kTyXmk77qAXxm+o5TQgu6NhR5MDoSuDF8rm:TMmkP7I+o5TqsaY

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1920-55-0x0000000000400000-0x0000000000557000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1920	157d305f19831bbe0b1a4c4df56069a234361fec11ae9c02bab77f1af641b97b.exe
1920	157d305f19831bbe0b1a4c4df56069a234361fec11ae9c02bab77f1af641b97b.exe

C:\Users\Admin\AppData\Local\Temp\157d305f19831bbe0b1a4c4df56069a234361fec11ae9c02bab77f1af641b97b.exe
"C:\Users\Admin\AppData\Local\Temp\157d305f19831bbe0b1a4c4df56069a234361fec11ae9c02bab77f1af641b97b.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1920

memory/1920-54-0x00000000763F1000-0x00000000763F3000-memory.dmp

Filesize
8KB

Download
memory/1920-55-0x0000000000400000-0x0000000000557000-memory.dmp

Filesize
1.3MB

Download
memory/1920-56-0x0000000000AB0000-0x0000000000C07000-memory.dmp

Filesize
1.3MB

Download