e253ad9f366e3bed2073fa466faf4154abe719c1b40c3b2e41d022520495e843

Analysis

max time kernel
3s
max time network
35s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
01-12-2022 14:45

Target

e253ad9f366e3bed2073fa466faf4154abe719c1b40c3b2e41d022520495e843.exe
Size

56KB
MD5

e4d1262301fc25d38c142025cd8f1a36
SHA1

0d3f506f8102641ca947a1c2298396e85f2fde74
SHA256

e253ad9f366e3bed2073fa466faf4154abe719c1b40c3b2e41d022520495e843
SHA512

5e644f8cec9dd3427cc93fae4d894b2c2f77034115ed7e4913cd80d0a494964c8efe6b57b234c7c02ef33c8fd02e245a9395af08049d5cee98c3b79914a26bb2
SSDEEP

1536:tHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVtUR:tHoLde/OgV432UcP39hXJZnU

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1236-54-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral1/memory/1236-55-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	e253ad9f366e3bed2073fa466faf4154abe719c1b40c3b2e41d022520495e843.exe

C:\Users\Admin\AppData\Local\Temp\e253ad9f366e3bed2073fa466faf4154abe719c1b40c3b2e41d022520495e843.exe
"C:\Users\Admin\AppData\Local\Temp\e253ad9f366e3bed2073fa466faf4154abe719c1b40c3b2e41d022520495e843.exe"
1⤵
- Drops file in Windows directory
PID:1236

memory/1236-54-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/1236-55-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download