Analysis

  • max time kernel
    149s
  • max time network
    159s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-11-2022 02:42

General

  • Target

    ad6804a70a90f527cee3514fc7204388b129ddbb97db4241171770ea399f21d0.exe

  • Size

    143KB

  • MD5

    84282e01e81ea0e27dcaac37405bfcca

  • SHA1

    35fe0140a5fe7ef0fbbbff5a5cdf345d9e6912be

  • SHA256

    ad6804a70a90f527cee3514fc7204388b129ddbb97db4241171770ea399f21d0

  • SHA512

    c6dbac3b77532a68f5ada47357ce00ed98f634b617c9dc1ba72b59b459e81302f962f7275662bb2b0be7dcd719eacf855e44742560d037b00401161f33d5325d

  • SSDEEP

    1536:oc3jgk5gy0UhOEcwx53suKj/WAvw3EcyE2Os4ZL9B:/zp5JHhxdHSvgjL9B

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\ad6804a70a90f527cee3514fc7204388b129ddbb97db4241171770ea399f21d0.exe
    "C:\Users\Admin\AppData\Local\Temp\ad6804a70a90f527cee3514fc7204388b129ddbb97db4241171770ea399f21d0.exe"
    1⤵
      PID:1872

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1872-132-0x0000000000400000-0x0000000000449000-memory.dmp

      Filesize

      292KB

    • memory/1872-133-0x0000000010000000-0x000000001000E000-memory.dmp

      Filesize

      56KB

    • memory/1872-137-0x0000000000400000-0x0000000000449000-memory.dmp

      Filesize

      292KB

    • memory/1872-138-0x0000000000400000-0x0000000000449000-memory.dmp

      Filesize

      292KB