Analysis

  • max time kernel
    141s
  • max time network
    125s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/03/2023, 02:05

General

  • Target

    install-antimalware-fix.exe

  • Size

    884KB

  • MD5

    d4bc14d79adb65d8a03c1043f0c2ff07

  • SHA1

    d454154fe8241eecf2a53f658aaeed805d25fecc

  • SHA256

    de3e7309a038212864c3f1d717e29cbc3528390f1a8a99b5aee924f1fddc2508

  • SHA512

    71f04ad3d96e5d83839cb9effb71ac826cb9ea6e4701c0e744b7d9f80fe029669f8ce06b6080e0c97a94abe1be44f81b09dbd0b57758cd11249ab1e39fc30a29

  • SSDEEP

    24576:n9HmIVL1Tvp/MdafdwXCK0W8R/XJe0oYbdVRcTjCPJrIklTG0Z:RmIVXCafdjJDM0oYbTRejCxrIklTG0Z

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\install-antimalware-fix.exe
    "C:\Users\Admin\AppData\Local\Temp\install-antimalware-fix.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    PID:4896

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4896-133-0x0000000000400000-0x0000000000655000-memory.dmp

    Filesize

    2.3MB

  • memory/4896-134-0x0000000000C50000-0x0000000000C51000-memory.dmp

    Filesize

    4KB

  • memory/4896-135-0x0000000000400000-0x0000000000655000-memory.dmp

    Filesize

    2.3MB

  • memory/4896-138-0x0000000000400000-0x0000000000655000-memory.dmp

    Filesize

    2.3MB

  • memory/4896-141-0x0000000000400000-0x0000000000655000-memory.dmp

    Filesize

    2.3MB