Analysis

  • max time kernel
    174s
  • max time network
    161s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/11/2022, 20:33

General

  • Target

    c4273e5f7618db908a01a4836b138b747ebcfccdb5aeadb439f87e0e82ec9533.exe

  • Size

    2.2MB

  • MD5

    df0090709dc4d4cfda6932ef72b7ab44

  • SHA1

    0b566f877beddc94f4a7972797948e3fa27853e2

  • SHA256

    c4273e5f7618db908a01a4836b138b747ebcfccdb5aeadb439f87e0e82ec9533

  • SHA512

    34a1f9fb2062f4fa99c97a8c5bd7a951206c337562f3a4ede8266d64634ef39f76a2853a4979295ef7a13061dd8c1eff811577bbe5b6aa6e368c9d09028a283f

  • SSDEEP

    49152:em4aEm1f2oAR1HpLvpxCzWLiNFsU1bB97+8oOayKFQG9H:LZEMf2XRdx0hxF97+vOmWG9H

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 27 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of NtSetInformationThreadHideFromDebugger 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c4273e5f7618db908a01a4836b138b747ebcfccdb5aeadb439f87e0e82ec9533.exe
    "C:\Users\Admin\AppData\Local\Temp\c4273e5f7618db908a01a4836b138b747ebcfccdb5aeadb439f87e0e82ec9533.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of SetWindowsHookEx
    PID:2844

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2844-132-0x0000000000400000-0x0000000000817000-memory.dmp

    Filesize

    4.1MB

  • memory/2844-133-0x0000000077870000-0x0000000077A13000-memory.dmp

    Filesize

    1.6MB

  • memory/2844-134-0x00000000774F0000-0x0000000077705000-memory.dmp

    Filesize

    2.1MB

  • memory/2844-136-0x00000000758A0000-0x0000000075A40000-memory.dmp

    Filesize

    1.6MB

  • memory/2844-137-0x0000000076A20000-0x0000000076A9A000-memory.dmp

    Filesize

    488KB

  • memory/2844-1481-0x0000000000400000-0x0000000000817000-memory.dmp

    Filesize

    4.1MB

  • memory/2844-1482-0x0000000000400000-0x0000000000817000-memory.dmp

    Filesize

    4.1MB

  • memory/2844-1483-0x0000000000400000-0x0000000000817000-memory.dmp

    Filesize

    4.1MB

  • memory/2844-1484-0x0000000000400000-0x0000000000817000-memory.dmp

    Filesize

    4.1MB

  • memory/2844-1486-0x0000000000400000-0x0000000000817000-memory.dmp

    Filesize

    4.1MB

  • memory/2844-1487-0x0000000000400000-0x0000000000817000-memory.dmp

    Filesize

    4.1MB

  • memory/2844-1488-0x0000000000400000-0x0000000000817000-memory.dmp

    Filesize

    4.1MB

  • memory/2844-1489-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1492-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1491-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1493-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1494-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1496-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1498-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1500-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1502-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1504-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1506-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1508-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1510-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1512-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1514-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1516-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1518-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1520-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1522-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1524-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1530-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1532-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1528-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1526-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1534-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1535-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1536-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2844-1537-0x0000000000400000-0x0000000000817000-memory.dmp

    Filesize

    4.1MB