fdb846f3d1fc2ecf48bbfb86607b9f62cc3fdaf09d689d45e7761ea108d404ad

Analysis

max time kernel
14s
max time network
31s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
06-12-2022 10:31

Target

fdb846f3d1fc2ecf48bbfb86607b9f62cc3fdaf09d689d45e7761ea108d404ad.exe
Size

255KB
MD5

26980368b16051471ac17664252634cb
SHA1

5aa35a1296dfd975f44b7f3125bd9a63995fac84
SHA256

fdb846f3d1fc2ecf48bbfb86607b9f62cc3fdaf09d689d45e7761ea108d404ad
SHA512

cc5f2e298d1a69159ad79d63e095fc270983b0566a9a55ead235222f3bc1f10ea3d170555d3fb4632eeb08089c0b88e15eae70503cd758b8a2f47f8ad7577ce9
SSDEEP

6144:pz87pYsC7wSbeWN6PjYGW1wTmoBarl5WwbN4gtQCjkNovLOAp:p4tYeWwPjYGW11kcNXtQ8vL1p

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1060-55-0x0000000000400000-0x0000000000559000-memory.dmp	upx
behavioral1/memory/1060-57-0x0000000000400000-0x0000000000559000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1060	fdb846f3d1fc2ecf48bbfb86607b9f62cc3fdaf09d689d45e7761ea108d404ad.exe

C:\Users\Admin\AppData\Local\Temp\fdb846f3d1fc2ecf48bbfb86607b9f62cc3fdaf09d689d45e7761ea108d404ad.exe
"C:\Users\Admin\AppData\Local\Temp\fdb846f3d1fc2ecf48bbfb86607b9f62cc3fdaf09d689d45e7761ea108d404ad.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1060

memory/1060-55-0x0000000000400000-0x0000000000559000-memory.dmp

Filesize
1.3MB

Download
memory/1060-57-0x0000000000400000-0x0000000000559000-memory.dmp

Filesize
1.3MB

Download