Analysis

  • max time kernel
    36s
  • max time network
    41s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    28/11/2022, 05:52

General

  • Target

    a4eeaa50bef644286880dcde36ceeb7fc517dc4277284be00d39273689312699.exe

  • Size

    406KB

  • MD5

    feeab03d2d64cfb829217e35840b4190

  • SHA1

    42ad8a263ea0f0a71f8fe3b02117662eb47b1ce0

  • SHA256

    a4eeaa50bef644286880dcde36ceeb7fc517dc4277284be00d39273689312699

  • SHA512

    2272f631a3b7f42b29dd17592edbd1e29d726581ada56c89ff3eb60ab809e6512e8a1aeaecdc3363a9f750b3a11b9a163b5f92ab292b3ecf8d355e7df06b7a30

  • SSDEEP

    12288:JEEjWJmz4ae+y5++BTb5WfnGtGZ8055gQZn9floS:JtjWJ04DdQ/GSt

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a4eeaa50bef644286880dcde36ceeb7fc517dc4277284be00d39273689312699.exe
    "C:\Users\Admin\AppData\Local\Temp\a4eeaa50bef644286880dcde36ceeb7fc517dc4277284be00d39273689312699.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1192-54-0x0000000000400000-0x0000000000556000-memory.dmp

    Filesize

    1.3MB

  • memory/1192-55-0x0000000076701000-0x0000000076703000-memory.dmp

    Filesize

    8KB

  • memory/1192-56-0x0000000000400000-0x0000000000556000-memory.dmp

    Filesize

    1.3MB