Analysis
-
max time kernel
161s -
max time network
184s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
28/11/2022, 04:37
General
-
Target
0b9c6763c3d5f40e5945ae82fddf29cc5af860363d1fdf76c184d1beb4bdd48c.exe
-
Size
21KB
-
MD5
322c82a66a280513b4ee06148bfb3a05
-
SHA1
8c1b1bc33ae4fb7b6189b6e97d2ac5ade0558b3d
-
SHA256
0b9c6763c3d5f40e5945ae82fddf29cc5af860363d1fdf76c184d1beb4bdd48c
-
SHA512
a562c04445087aa4fb4005f0da2700ecb4b6e7726e4a72e90db71c6c4bc2b234042762bae587f4e1dde352dd3908834f308b0835aeced777dbc688bdd3bc3ce7
-
SSDEEP
384:sLe6jx0ASgPyE+YCvaYkqPO7/Qa5KFo1KkmXKXBUEKaNJawcudoD7UECanG:sPjGASUCVkqe4KSL6nbcuyD7UYG
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0b9c6763c3d5f40e5945ae82fddf29cc5af860363d1fdf76c184d1beb4bdd48c.exe"C:\Users\Admin\AppData\Local\Temp\0b9c6763c3d5f40e5945ae82fddf29cc5af860363d1fdf76c184d1beb4bdd48c.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
29KB
MD5a54cd98f8a9384a08179230d44740da3
SHA1b31a5787163bfbc8283e7cd72459d93cc1c1f4e6
SHA25615fd7879ffc37a69f5489c4c7e1870d37ba187a8f79c3402984643bfe226068e
SHA512239c2541bd1d78282ba9562f145bc15acba0d5ff02f1279b20d1a155e331a9c9cdab8f836a279150578e44d7fcc645913476a445de8115f71230a484f0cc2c5f
-
Filesize
60KB