Analysis

  • max time kernel
    94s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03-12-2022 19:31

General

  • Target

    e4e2c9d7dd2cb99ecce2f3c00dd8164b0377fd34f795fd4b8994889972927086.exe

  • Size

    1.4MB

  • MD5

    aa026cd040920d7d8a7bea7d7e5cd990

  • SHA1

    eee357475a19d414953477ea953c32171f1754d0

  • SHA256

    e4e2c9d7dd2cb99ecce2f3c00dd8164b0377fd34f795fd4b8994889972927086

  • SHA512

    f49932f586f166b6b401bb8d33eb1773aca500ccd9fba48469f40dffee154642b01aed21a85bbd1909302ba882ad8bfbddf55c7aa887c505ae58a7511690383a

  • SSDEEP

    24576:KsW3XI7rWIEO0eDfcPOvCOpMEPJonhql5oHS+zh3JajtObuF+T+NUFRjUgIeX401:CKrOuCQhJohq3oHrh3JajtObu2+NUF5r

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e4e2c9d7dd2cb99ecce2f3c00dd8164b0377fd34f795fd4b8994889972927086.exe
    "C:\Users\Admin\AppData\Local\Temp\e4e2c9d7dd2cb99ecce2f3c00dd8164b0377fd34f795fd4b8994889972927086.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4072

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4072-132-0x0000000000400000-0x0000000000570000-memory.dmp

    Filesize

    1.4MB

  • memory/4072-135-0x0000000000400000-0x0000000000570000-memory.dmp

    Filesize

    1.4MB