a377fe0dcb2869a5d56e3bc588249c42472696e1eb287a2256e4b484dce64013

Analysis

max time kernel
176s
max time network
195s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
06-12-2022 19:32

Target

a377fe0dcb2869a5d56e3bc588249c42472696e1eb287a2256e4b484dce64013.exe
Size

147KB
MD5

b85296670a291ca66e5c9760f2677c00
SHA1

0ae8724d1668165e73c22a1e60ead6d749fcc68d
SHA256

a377fe0dcb2869a5d56e3bc588249c42472696e1eb287a2256e4b484dce64013
SHA512

bcc45f5f4e26fe36e6c52b0e67e7db319c017a03c5018f671fdbf3a4baaf64063e8c1bd77674c6e34250d874b84968d35b87c62889dda9a3959b32613b23d7d3
SSDEEP

3072:JwtS7p+7Xg/z8Je/ttnH9UgleFin5SL62yq4tfGU0:Jlp+0/IuV9oSILh4fGU

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/5032-134-0x0000000000400000-0x0000000000419000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5032	a377fe0dcb2869a5d56e3bc588249c42472696e1eb287a2256e4b484dce64013.exe

C:\Users\Admin\AppData\Local\Temp\a377fe0dcb2869a5d56e3bc588249c42472696e1eb287a2256e4b484dce64013.exe
"C:\Users\Admin\AppData\Local\Temp\a377fe0dcb2869a5d56e3bc588249c42472696e1eb287a2256e4b484dce64013.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5032

memory/5032-134-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download