Analysis
-
max time kernel
163s -
max time network
189s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
03-12-2022 14:43
General
-
Target
b6aa7b0b926207840636002c8bfaa6fba824a6c4376746ee595e5f1026b08849.exe
-
Size
244KB
-
MD5
6589356a55d532a851a580cbc1aac99c
-
SHA1
ae9fccf8ab12693e067e72302ab07b2ef8b8e3d7
-
SHA256
b6aa7b0b926207840636002c8bfaa6fba824a6c4376746ee595e5f1026b08849
-
SHA512
b6925bd300bde51e194387f67503bde3fd5aced835c8c49ccb40e13b62888f6568ca4630c00fa479079eacada393179caf54775bf09d16db6af63de373030ea6
-
SSDEEP
6144:711Ae347ppLQAyJJgskpjBGW9Js2YuXQdO5L1Zsvfm:nr34jY2sYBR7dn1svfm
Score
8/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b6aa7b0b926207840636002c8bfaa6fba824a6c4376746ee595e5f1026b08849.exe"C:\Users\Admin\AppData\Local\Temp\b6aa7b0b926207840636002c8bfaa6fba824a6c4376746ee595e5f1026b08849.exe"1⤵
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\svchost.exesvchost.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
316KB
-
Filesize
80KB
-
Filesize
56KB
-
Filesize
36KB
-
Filesize
36KB