Analysis

  • max time kernel
    90s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-05-2023 19:55

General

  • Target

    b99bcfbd154082296e50caa504e850793d865a2986ef0fbf732d470891f77c94.exe

  • Size

    2.6MB

  • MD5

    0a5a2696d864e4bef7746277531c4a52

  • SHA1

    5b6c93c4e257cc6e1c53f286e7985efeb508b513

  • SHA256

    b99bcfbd154082296e50caa504e850793d865a2986ef0fbf732d470891f77c94

  • SHA512

    7f405162d0750034037c5daf2906973ed45ffe4f7c800c4536754da65a894e55869d8646b5531a4b2f3b51724480cc1d7558848c1f6c24c45d33154c13997d72

  • SSDEEP

    49152:GMM9UGKi7FF4Qnxqh7aU8jRBwibjlyo9yeLHG6X51//UaHfXs:GMI/txyB2wCjowLnX//0

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b99bcfbd154082296e50caa504e850793d865a2986ef0fbf732d470891f77c94.exe
    "C:\Users\Admin\AppData\Local\Temp\b99bcfbd154082296e50caa504e850793d865a2986ef0fbf732d470891f77c94.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1612

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1612-133-0x0000000000400000-0x0000000000BEF000-memory.dmp

    Filesize

    7.9MB

  • memory/1612-134-0x0000000000400000-0x0000000000BEF000-memory.dmp

    Filesize

    7.9MB