Analysis

  • max time kernel
    151s
  • max time network
    87s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    27/11/2022, 20:33

General

  • Target

    c4273e5f7618db908a01a4836b138b747ebcfccdb5aeadb439f87e0e82ec9533.exe

  • Size

    2.2MB

  • MD5

    df0090709dc4d4cfda6932ef72b7ab44

  • SHA1

    0b566f877beddc94f4a7972797948e3fa27853e2

  • SHA256

    c4273e5f7618db908a01a4836b138b747ebcfccdb5aeadb439f87e0e82ec9533

  • SHA512

    34a1f9fb2062f4fa99c97a8c5bd7a951206c337562f3a4ede8266d64634ef39f76a2853a4979295ef7a13061dd8c1eff811577bbe5b6aa6e368c9d09028a283f

  • SSDEEP

    49152:em4aEm1f2oAR1HpLvpxCzWLiNFsU1bB97+8oOayKFQG9H:LZEMf2XRdx0hxF97+vOmWG9H

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of NtSetInformationThreadHideFromDebugger 53 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c4273e5f7618db908a01a4836b138b747ebcfccdb5aeadb439f87e0e82ec9533.exe
    "C:\Users\Admin\AppData\Local\Temp\c4273e5f7618db908a01a4836b138b747ebcfccdb5aeadb439f87e0e82ec9533.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of SetWindowsHookEx
    PID:1900

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1900-54-0x00000000757B1000-0x00000000757B3000-memory.dmp

    Filesize

    8KB

  • memory/1900-56-0x0000000074F40000-0x0000000074F87000-memory.dmp

    Filesize

    284KB

  • memory/1900-464-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-463-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-462-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-468-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-469-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-467-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-466-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-465-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-470-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-474-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-475-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-473-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-472-0x0000000000400000-0x0000000000817000-memory.dmp

    Filesize

    4.1MB

  • memory/1900-471-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-476-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-477-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-482-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-483-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-481-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-480-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-479-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-478-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-485-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-484-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-487-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-488-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-486-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-492-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-493-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-491-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-490-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-489-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-494-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-495-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-497-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-496-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-499-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-500-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-498-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-504-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-505-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-503-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-502-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-501-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-510-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-511-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-509-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-508-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-507-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-506-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-516-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-517-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-515-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-514-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-513-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-512-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-518-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-520-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-521-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-519-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-524-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-523-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-522-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-1332-0x0000000002320000-0x0000000002420000-memory.dmp

    Filesize

    1024KB

  • memory/1900-1333-0x0000000002460000-0x00000000025E1000-memory.dmp

    Filesize

    1.5MB

  • memory/1900-3810-0x0000000002320000-0x0000000002420000-memory.dmp

    Filesize

    1024KB

  • memory/1900-4814-0x0000000002710000-0x0000000002821000-memory.dmp

    Filesize

    1.1MB

  • memory/1900-4821-0x0000000000400000-0x0000000000817000-memory.dmp

    Filesize

    4.1MB

  • memory/1900-4822-0x00000000025F0000-0x00000000026F1000-memory.dmp

    Filesize

    1.0MB

  • memory/1900-4869-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1900-4870-0x0000000000400000-0x0000000000817000-memory.dmp

    Filesize

    4.1MB

  • memory/1900-4871-0x0000000000400000-0x0000000000817000-memory.dmp

    Filesize

    4.1MB