2a2955b44d2fa9ddb2343e9e5770118db6b2c779b27dde8e5bf6d5fa80d1076f

Analysis

max time kernel
36s
max time network
30s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
03/12/2022, 04:12

Target

2a2955b44d2fa9ddb2343e9e5770118db6b2c779b27dde8e5bf6d5fa80d1076f.exe
Size

11KB
MD5

0461943cfd47d577750e4c4f4768cc40
SHA1

bcfe50b2fcdaf21dc2b0f52ad5192ed431469c36
SHA256

2a2955b44d2fa9ddb2343e9e5770118db6b2c779b27dde8e5bf6d5fa80d1076f
SHA512

c6b4cf62f231a17af9e2582b63f3664d9a7e72829fa6719ab2f2b2b00eb0864eb356432c71363b663bd49ce8c12dbecdf35dd60063432d41c7064702574e09ce
SSDEEP

192:wiRb982EYwUxCo6mdFArg6HxTr2yyBMIp7lsNqZmJ4WrWy7Q4tQ8NqB:JRBPnCo6mdiHTS72wCNUmJ4WrB04trw

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1828-54-0x0000000000400000-0x000000000040C000-memory.dmp	upx

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1828	2a2955b44d2fa9ddb2343e9e5770118db6b2c779b27dde8e5bf6d5fa80d1076f.exe
1828	2a2955b44d2fa9ddb2343e9e5770118db6b2c779b27dde8e5bf6d5fa80d1076f.exe
1828	2a2955b44d2fa9ddb2343e9e5770118db6b2c779b27dde8e5bf6d5fa80d1076f.exe
1828	2a2955b44d2fa9ddb2343e9e5770118db6b2c779b27dde8e5bf6d5fa80d1076f.exe

C:\Users\Admin\AppData\Local\Temp\2a2955b44d2fa9ddb2343e9e5770118db6b2c779b27dde8e5bf6d5fa80d1076f.exe
"C:\Users\Admin\AppData\Local\Temp\2a2955b44d2fa9ddb2343e9e5770118db6b2c779b27dde8e5bf6d5fa80d1076f.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1828

memory/1828-54-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download