Analysis

  • max time kernel
    4s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    03-12-2022 07:36

General

  • Target

    749c9387907e227002f35b7717aba4d4b11689743f23a56629755bb028d68ab6.exe

  • Size

    99KB

  • MD5

    8c497ec4c7b182a05e1fc60b6695d96e

  • SHA1

    70055622b3bad4b41d2649252fc53dc190eea8b2

  • SHA256

    749c9387907e227002f35b7717aba4d4b11689743f23a56629755bb028d68ab6

  • SHA512

    98312b9e06319a3513ce36d426a768077058c26951b934ff01b7f570d56ee655ead06574cbdd09d687eb9c59847c9371d9c89cdbfd677532e3340da4c497f48e

  • SSDEEP

    3072:4wi089AvUB1LZPE1AAQvCTjE/j15AY41C:U0wB1LlyVb+15AYF

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of UnmapMainImage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\749c9387907e227002f35b7717aba4d4b11689743f23a56629755bb028d68ab6.exe
    "C:\Users\Admin\AppData\Local\Temp\749c9387907e227002f35b7717aba4d4b11689743f23a56629755bb028d68ab6.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of UnmapMainImage
    PID:1236

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1236-54-0x0000000000400000-0x0000000000440000-memory.dmp

    Filesize

    256KB

  • memory/1236-56-0x0000000000400000-0x0000000000417000-memory.dmp

    Filesize

    92KB

  • memory/1236-59-0x0000000074FD1000-0x0000000074FD3000-memory.dmp

    Filesize

    8KB

  • memory/1236-60-0x0000000000400000-0x0000000000417000-memory.dmp

    Filesize

    92KB