Analysis

  • max time kernel
    41s
  • max time network
    84s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    04/12/2022, 04:26

General

  • Target

    b0171609b6951040fb83054e0be824ad54f4df28ad333266d5867af44fbc6062.exe

  • Size

    922KB

  • MD5

    509c0f9767f96072e5c0dfd50856f841

  • SHA1

    ecda2c16766817086411bbafefc17affaa10cc9b

  • SHA256

    b0171609b6951040fb83054e0be824ad54f4df28ad333266d5867af44fbc6062

  • SHA512

    8a39785f11b4007c9153d60c455d031b321f1fef0aaff568b6d5cc47bf639f666d40bd6f72119fde0de7c2dae12b917ae1ffdbf3debb225b63eab6df354d2d62

  • SSDEEP

    24576:MBIhkW+zP+Jns5rZf2/1WsBHyp/A/tLEGDqRW4QrVaB:MWh5+zP+Jns14pBHh3Dqw4QB

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b0171609b6951040fb83054e0be824ad54f4df28ad333266d5867af44fbc6062.exe
    "C:\Users\Admin\AppData\Local\Temp\b0171609b6951040fb83054e0be824ad54f4df28ad333266d5867af44fbc6062.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1724

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1724-54-0x0000000075DF1000-0x0000000075DF3000-memory.dmp

          Filesize

          8KB

        • memory/1724-55-0x0000000000400000-0x0000000000702000-memory.dmp

          Filesize

          3.0MB

        • memory/1724-56-0x0000000000400000-0x0000000000702000-memory.dmp

          Filesize

          3.0MB

        • memory/1724-57-0x0000000000400000-0x0000000000702000-memory.dmp

          Filesize

          3.0MB