a3a95b66a2869143d8f53459333b08b6049228e24c8f136afb0a9ab7d26d9fdd

Analysis

max time kernel
20s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
06-12-2022 20:57

Target

a3a95b66a2869143d8f53459333b08b6049228e24c8f136afb0a9ab7d26d9fdd.exe
Size

230KB
MD5

f39d9890893aad0e987c4a7669d493d6
SHA1

73ce36a45b98c44ab4791775c36161d49986c5be
SHA256

a3a95b66a2869143d8f53459333b08b6049228e24c8f136afb0a9ab7d26d9fdd
SHA512

8ec9fe6d5cfacbda6228ad09e71a0bd4a657abcef25af1f9ac3847e6a0e8aa50ceb80fc90572299f3ab70634e565d442bba8b2bef931a4bd74ff944cda2e3895
SSDEEP

6144:kEPZSMpIiAqDpgH5HGs13uy/GslHCn0oAT67+2OkqnP:kZwpivxuyuslHCMm7nOkqnP

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/884-55-0x0000000000400000-0x000000000048B000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
884	a3a95b66a2869143d8f53459333b08b6049228e24c8f136afb0a9ab7d26d9fdd.exe

C:\Users\Admin\AppData\Local\Temp\a3a95b66a2869143d8f53459333b08b6049228e24c8f136afb0a9ab7d26d9fdd.exe
"C:\Users\Admin\AppData\Local\Temp\a3a95b66a2869143d8f53459333b08b6049228e24c8f136afb0a9ab7d26d9fdd.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:884

memory/884-54-0x0000000076411000-0x0000000076413000-memory.dmp

Filesize
8KB

Download
memory/884-55-0x0000000000400000-0x000000000048B000-memory.dmp

Filesize
556KB

Download