cce0d3401e5080a50848bdd0a2566e1289e676b34be83ac851fde49fa55e9182

Analysis

max time kernel
91s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03/12/2022, 14:26

Target

cce0d3401e5080a50848bdd0a2566e1289e676b34be83ac851fde49fa55e9182.exe
Size

14KB
MD5

b4f742089c5fb4fc09ca1899c6960b09
SHA1

8ee7bf52c3748a6f30f8ecc83ea79171a45c9074
SHA256

cce0d3401e5080a50848bdd0a2566e1289e676b34be83ac851fde49fa55e9182
SHA512

a6b5743ab049298901d9da77ef6465c6e8139f5eed77827329714699d50fc1e8b4756f69d8f50723d8ed6994ac11dc4fc481e27b39568d5aeae981b35129510d
SSDEEP

192:TJHvJy5s3dpCSxfnaPais9dfZIZx89gB7AIIs4Wbsr7Ur6fT2f:lHv9+Sxfms9dr47BbSXM

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/800-132-0x0000000000400000-0x000000000041E000-memory.dmp	upx
behavioral2/memory/800-133-0x0000000000400000-0x000000000041E000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
800	cce0d3401e5080a50848bdd0a2566e1289e676b34be83ac851fde49fa55e9182.exe
800	cce0d3401e5080a50848bdd0a2566e1289e676b34be83ac851fde49fa55e9182.exe

C:\Users\Admin\AppData\Local\Temp\cce0d3401e5080a50848bdd0a2566e1289e676b34be83ac851fde49fa55e9182.exe
"C:\Users\Admin\AppData\Local\Temp\cce0d3401e5080a50848bdd0a2566e1289e676b34be83ac851fde49fa55e9182.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:800

memory/800-132-0x0000000000400000-0x000000000041E000-memory.dmp

Filesize
120KB

Download
memory/800-133-0x0000000000400000-0x000000000041E000-memory.dmp

Filesize
120KB

Download