50752d2cf5da6f272e1ac9c9323976db45120656aa401780d4a3d0ba02aa7d2d

Analysis

max time kernel
190s
max time network
205s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
05/12/2022, 14:09

Target

50752d2cf5da6f272e1ac9c9323976db45120656aa401780d4a3d0ba02aa7d2d.exe
Size

560KB
MD5

e45640f1f4bb1f630c9ec7879d9062f6
SHA1

838e5c0c045f60f02d460ecca5b5d161dcbdd6e2
SHA256

50752d2cf5da6f272e1ac9c9323976db45120656aa401780d4a3d0ba02aa7d2d
SHA512

8d0e7a4979a2168e1f67fbfc9ff3434c6387b9f695dc9cac7de03042e7cb438e1c62dc559672c73124f37d95ca322337196198fe4b1fda81e091db9f3d236dd6
SSDEEP

12288:k/xki3lVfRqmZ+lC0tj6Cc5jt0j5ftRASUKjY:kTzWtjJ8jtoRAUY

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4964-132-0x0000000000400000-0x00000000004B5000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4964	50752d2cf5da6f272e1ac9c9323976db45120656aa401780d4a3d0ba02aa7d2d.exe
4964	50752d2cf5da6f272e1ac9c9323976db45120656aa401780d4a3d0ba02aa7d2d.exe

C:\Users\Admin\AppData\Local\Temp\50752d2cf5da6f272e1ac9c9323976db45120656aa401780d4a3d0ba02aa7d2d.exe
"C:\Users\Admin\AppData\Local\Temp\50752d2cf5da6f272e1ac9c9323976db45120656aa401780d4a3d0ba02aa7d2d.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4964

memory/4964-132-0x0000000000400000-0x00000000004B5000-memory.dmp

Filesize
724KB

Download