Analysis

  • max time kernel
    30s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    31-05-2023 20:14

General

  • Target

    d26bb69747d89711031bff66b25f61ec6c2c16471fe5f863ec606848ef07862a.exe

  • Size

    1.5MB

  • MD5

    286e834f08e6c5b0c2bc3739cd9a61fd

  • SHA1

    0552aec1d266e21b7efd140cbe3cd9f8f89468db

  • SHA256

    d26bb69747d89711031bff66b25f61ec6c2c16471fe5f863ec606848ef07862a

  • SHA512

    cd1000620e6d0d4857f38a804fea6981eb94ab7b15a8f372003d3989e9784272dff0b884217a9d4dfe5205f1ad83fd55296386bc68e480d24a9760e39e6a1041

  • SSDEEP

    24576:cJ8wZt2e66l7OC6kf63FEE6bD2xBepVzYOG3c:cdQ8X1+eE6v2xozzYOt

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 24 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d26bb69747d89711031bff66b25f61ec6c2c16471fe5f863ec606848ef07862a.exe
    "C:\Users\Admin\AppData\Local\Temp\d26bb69747d89711031bff66b25f61ec6c2c16471fe5f863ec606848ef07862a.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1496

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1496-54-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1496-55-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1496-56-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1496-58-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1496-60-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1496-64-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1496-62-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1496-68-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1496-70-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1496-74-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1496-78-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1496-82-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1496-86-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1496-90-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1496-94-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1496-92-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1496-96-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1496-88-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1496-84-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1496-80-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1496-76-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1496-72-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1496-66-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1496-97-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB