40725c62e96cd9f8b8a1c63360cb4ea5d0c49ee904a376faa1f1a6070802ea21

Analysis

max time kernel
171s
max time network
206s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
28-11-2022 03:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

40725c62e96cd9f8b8a1c63360cb4ea5d0c49ee904a376faa1f1a6070802ea21.exe
Size

1.2MB
MD5

c5afc3971d8fcf26445ef87e95cd3169
SHA1

bd3351f586d887151af63ac22a6c9e31ab6fe139
SHA256

40725c62e96cd9f8b8a1c63360cb4ea5d0c49ee904a376faa1f1a6070802ea21
SHA512

c19f413f10b539800fad801147cba82ca938b36032cd87464252e6d5810419ab73b831e85ff56bff0097b56cbb58268094b3104410bafb9981add6b5bf1089eb
SSDEEP

24576:bvvECaB/rRQy/tcAQA3qDebPqo5LUsho5OOo5l:jm/tjla6zqopUshokOoj

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 23 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

Processes:

resource	yara_rule
behavioral2/memory/2624-133-0x0000000000B80000-0x0000000000BBE000-memory.dmp	upx
behavioral2/memory/2624-135-0x0000000000B80000-0x0000000000BBE000-memory.dmp	upx
behavioral2/memory/2624-137-0x0000000000B80000-0x0000000000BBE000-memory.dmp	upx
behavioral2/memory/2624-134-0x0000000000B80000-0x0000000000BBE000-memory.dmp	upx
behavioral2/memory/2624-139-0x0000000000B80000-0x0000000000BBE000-memory.dmp	upx
behavioral2/memory/2624-142-0x0000000000B80000-0x0000000000BBE000-memory.dmp	upx
behavioral2/memory/2624-144-0x0000000000B80000-0x0000000000BBE000-memory.dmp	upx
behavioral2/memory/2624-146-0x0000000000B80000-0x0000000000BBE000-memory.dmp	upx
behavioral2/memory/2624-148-0x0000000000B80000-0x0000000000BBE000-memory.dmp	upx
behavioral2/memory/2624-150-0x0000000000B80000-0x0000000000BBE000-memory.dmp	upx
behavioral2/memory/2624-152-0x0000000000B80000-0x0000000000BBE000-memory.dmp	upx
behavioral2/memory/2624-154-0x0000000000B80000-0x0000000000BBE000-memory.dmp	upx
behavioral2/memory/2624-156-0x0000000000B80000-0x0000000000BBE000-memory.dmp	upx
behavioral2/memory/2624-158-0x0000000000B80000-0x0000000000BBE000-memory.dmp	upx
behavioral2/memory/2624-160-0x0000000000B80000-0x0000000000BBE000-memory.dmp	upx
behavioral2/memory/2624-162-0x0000000000B80000-0x0000000000BBE000-memory.dmp	upx
behavioral2/memory/2624-164-0x0000000000B80000-0x0000000000BBE000-memory.dmp	upx
behavioral2/memory/2624-166-0x0000000000B80000-0x0000000000BBE000-memory.dmp	upx
behavioral2/memory/2624-168-0x0000000000B80000-0x0000000000BBE000-memory.dmp	upx
behavioral2/memory/2624-170-0x0000000000B80000-0x0000000000BBE000-memory.dmp	upx
behavioral2/memory/2624-172-0x0000000000B80000-0x0000000000BBE000-memory.dmp	upx
behavioral2/memory/2624-176-0x0000000000B80000-0x0000000000BBE000-memory.dmp	upx
behavioral2/memory/2624-174-0x0000000000B80000-0x0000000000BBE000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

40725c62e96cd9f8b8a1c63360cb4ea5d0c49ee904a376faa1f1a6070802ea21.exe

pid	process
2624	40725c62e96cd9f8b8a1c63360cb4ea5d0c49ee904a376faa1f1a6070802ea21.exe
2624	40725c62e96cd9f8b8a1c63360cb4ea5d0c49ee904a376faa1f1a6070802ea21.exe
2624	40725c62e96cd9f8b8a1c63360cb4ea5d0c49ee904a376faa1f1a6070802ea21.exe

C:\Users\Admin\AppData\Local\Temp\40725c62e96cd9f8b8a1c63360cb4ea5d0c49ee904a376faa1f1a6070802ea21.exe
"C:\Users\Admin\AppData\Local\Temp\40725c62e96cd9f8b8a1c63360cb4ea5d0c49ee904a376faa1f1a6070802ea21.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2624

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2624-132-0x0000000000400000-0x0000000000584000-memory.dmp

Filesize
1.5MB

Download
memory/2624-133-0x0000000000B80000-0x0000000000BBE000-memory.dmp

Filesize
248KB

Download
memory/2624-135-0x0000000000B80000-0x0000000000BBE000-memory.dmp

Filesize
248KB

Download
memory/2624-137-0x0000000000B80000-0x0000000000BBE000-memory.dmp

Filesize
248KB

Download
memory/2624-134-0x0000000000B80000-0x0000000000BBE000-memory.dmp

Filesize
248KB

Download
memory/2624-139-0x0000000000B80000-0x0000000000BBE000-memory.dmp

Filesize
248KB

Download
memory/2624-140-0x0000000000B50000-0x0000000000BDD000-memory.dmp

Filesize
564KB

Download
memory/2624-142-0x0000000000B80000-0x0000000000BBE000-memory.dmp

Filesize
248KB

Download
memory/2624-144-0x0000000000B80000-0x0000000000BBE000-memory.dmp

Filesize
248KB

Download
memory/2624-146-0x0000000000B80000-0x0000000000BBE000-memory.dmp

Filesize
248KB

Download
memory/2624-148-0x0000000000B80000-0x0000000000BBE000-memory.dmp

Filesize
248KB

Download
memory/2624-150-0x0000000000B80000-0x0000000000BBE000-memory.dmp

Filesize
248KB

Download
memory/2624-152-0x0000000000B80000-0x0000000000BBE000-memory.dmp

Filesize
248KB

Download
memory/2624-154-0x0000000000B80000-0x0000000000BBE000-memory.dmp

Filesize
248KB

Download
memory/2624-156-0x0000000000B80000-0x0000000000BBE000-memory.dmp

Filesize
248KB

Download
memory/2624-158-0x0000000000B80000-0x0000000000BBE000-memory.dmp

Filesize
248KB

Download
memory/2624-160-0x0000000000B80000-0x0000000000BBE000-memory.dmp

Filesize
248KB

Download
memory/2624-162-0x0000000000B80000-0x0000000000BBE000-memory.dmp

Filesize
248KB

Download
memory/2624-164-0x0000000000B80000-0x0000000000BBE000-memory.dmp

Filesize
248KB

Download
memory/2624-166-0x0000000000B80000-0x0000000000BBE000-memory.dmp

Filesize
248KB

Download
memory/2624-168-0x0000000000B80000-0x0000000000BBE000-memory.dmp

Filesize
248KB

Download
memory/2624-170-0x0000000000B80000-0x0000000000BBE000-memory.dmp

Filesize
248KB

Download
memory/2624-172-0x0000000000B80000-0x0000000000BBE000-memory.dmp

Filesize
248KB

Download
memory/2624-176-0x0000000000B80000-0x0000000000BBE000-memory.dmp

Filesize
248KB

Download
memory/2624-174-0x0000000000B80000-0x0000000000BBE000-memory.dmp

Filesize
248KB

Download
memory/2624-177-0x0000000000B50000-0x0000000000BDD000-memory.dmp

Filesize
564KB

Download
memory/2624-178-0x0000000000400000-0x0000000000584000-memory.dmp

Filesize
1.5MB

Download