Overview

overview

8

Static

static

8

495a3905b5...20.exe

windows7-x64

8

495a3905b5...20.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    198s
  • max time network
    212s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/11/2022, 04:08

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    495a3905b51de58c423b16ac5f641cdacc6a3777e2595f67596787cb998da520.exe

  • Size

    62KB

  • MD5

    b446d9e96c14ffd8945cc58b802c696f

  • SHA1

    5fa5b6f541d0daf94039ca25579bb391612a5cbd

  • SHA256

    495a3905b51de58c423b16ac5f641cdacc6a3777e2595f67596787cb998da520

  • SHA512

    5bce1e79e981bcbb1d973ec317e31c27843655d5969f0a05f1e981eae1b2d84e8ec24cf12b27f3d25df80fe4aff69ae0e82cd0d6927df1908f06941ca7feb006

  • SSDEEP

    1536:KHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6k2L5baULI:KHoLde/OgV432UcP39hvF+8I

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\495a3905b51de58c423b16ac5f641cdacc6a3777e2595f67596787cb998da520.exe
    "C:\Users\Admin\AppData\Local\Temp\495a3905b51de58c423b16ac5f641cdacc6a3777e2595f67596787cb998da520.exe"
    1⤵
    • Drops file in Windows directory
    PID:3800

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3800-132-0x0000000000400000-0x0000000000428000-memory.dmp

    Filesize

    160KB

    Download

  • memory/3800-133-0x0000000000400000-0x0000000000428000-memory.dmp

    Filesize

    160KB

    Download