Analysis
-
max time kernel
173s -
max time network
187s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
05-12-2022 05:57
General
-
Target
c9bcd568f4f507e99afe1cce99a64056c1d644d87d28c365a81c102ee143deba.exe
-
Size
395KB
-
MD5
c88c3ba71a3429f15d838e81d0c5bafd
-
SHA1
1288eaa97ac68067fea883bf7de67454c0effaed
-
SHA256
c9bcd568f4f507e99afe1cce99a64056c1d644d87d28c365a81c102ee143deba
-
SHA512
f887ce38e7dde3cd813535bd8b31fc28ccb518deba9e26cf5ff1decf1ae8ad708cafcf960e0e48c5608815c413646ce285e345920fa171e93b244a5530b23888
-
SSDEEP
6144:8HS5p2//dnv3uSIy3ANNo85p8xPptyHWCNPGMpuHDMSH/aiWRBdw+8lhRCnZKtK:8HqsxVIkx80xBIVN/pujMSf/WTuLRdK
Score
8/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of SetThreadContext 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c9bcd568f4f507e99afe1cce99a64056c1d644d87d28c365a81c102ee143deba.exe"C:\Users\Admin\AppData\Local\Temp\c9bcd568f4f507e99afe1cce99a64056c1d644d87d28c365a81c102ee143deba.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\explorer.exeexplorer.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
404KB
-
Filesize
532KB
-
Filesize
404KB
-
Filesize
532KB