b2c05f70d6981afcb761b96300188aa5c4172736c98d72dda05035606a39bcdb

Analysis

max time kernel
29s
max time network
32s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
04-05-2023 20:44

Target

b2c05f70d6981afcb761b96300188aa5c4172736c98d72dda05035606a39bcdb.exe
Size

286KB
MD5

5356939803bd9dc10dde9b47b8220f31
SHA1

07e55d8c561e26075564b1cb16ed7b0910ecbe0e
SHA256

b2c05f70d6981afcb761b96300188aa5c4172736c98d72dda05035606a39bcdb
SHA512

0a9655a70752d8b0f868088ba90588a218c67e28e4292ee1630b3e6d9c08bdc027294e486f7af2e0be6fcb0204a11559471f66bc828b2878d7437543f29b2620
SSDEEP

6144:qcNcBcr3jbdv/vVJJED/xgi/Ol2zLJ08jjJ:rr3/d8/xBFe8jjJ

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1992-54-0x0000000000400000-0x0000000000502685-memory.dmp	upx
behavioral1/memory/1992-58-0x0000000000400000-0x0000000000502685-memory.dmp	upx

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1992	b2c05f70d6981afcb761b96300188aa5c4172736c98d72dda05035606a39bcdb.exe
1992	b2c05f70d6981afcb761b96300188aa5c4172736c98d72dda05035606a39bcdb.exe

C:\Users\Admin\AppData\Local\Temp\b2c05f70d6981afcb761b96300188aa5c4172736c98d72dda05035606a39bcdb.exe
"C:\Users\Admin\AppData\Local\Temp\b2c05f70d6981afcb761b96300188aa5c4172736c98d72dda05035606a39bcdb.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1992

memory/1992-54-0x0000000000400000-0x0000000000502685-memory.dmp

Filesize
1.0MB

Download
memory/1992-58-0x0000000000400000-0x0000000000502685-memory.dmp

Filesize
1.0MB

Download