b375c7631793330a789f0b7ccef221511fedc0130dbe8a300e2d09c25a033041

Analysis

max time kernel
323s
max time network
348s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
04/12/2022, 05:01

Target

b375c7631793330a789f0b7ccef221511fedc0130dbe8a300e2d09c25a033041.exe
Size

99KB
MD5

9a571cde8ee981e690a97a270a7640b1
SHA1

0b2ec736a068af9c6859bb32f5c2ec1d7496592a
SHA256

b375c7631793330a789f0b7ccef221511fedc0130dbe8a300e2d09c25a033041
SHA512

df811deb96c1a1b4c8ce95a3e2c931afe4bdc72a6f4ab2e4a2279440de65d55bc62bfa8413b2d4c42124ea8b3c5f0637b5c5c6affcc8794c0d1e5c400a91eca5
SSDEEP

3072:cwi089AvUB1LZPE1AAQvCTjE/j15AY41C:w0wB1LlyVb+15AYF

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4836-132-0x0000000000400000-0x0000000000440000-memory.dmp	upx

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4836	b375c7631793330a789f0b7ccef221511fedc0130dbe8a300e2d09c25a033041.exe

C:\Users\Admin\AppData\Local\Temp\b375c7631793330a789f0b7ccef221511fedc0130dbe8a300e2d09c25a033041.exe
"C:\Users\Admin\AppData\Local\Temp\b375c7631793330a789f0b7ccef221511fedc0130dbe8a300e2d09c25a033041.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:4836

memory/4836-132-0x0000000000400000-0x0000000000440000-memory.dmp

Filesize
256KB

Download
memory/4836-134-0x0000000000400000-0x0000000000417000-memory.dmp

Filesize
92KB

Download