Analysis

  • max time kernel
    141s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15-06-2023 12:58

General

  • Target

    iecv.exe

  • Size

    61KB

  • MD5

    c66d21a7d3c6daec83d546623e8fcdf8

  • SHA1

    3f3a4ce5a0f3cd32980bcff1c6feed31b400548f

  • SHA256

    cd907a6079370ee2a59e8d72836c936927a970603552e68364b3d06069b8a7ef

  • SHA512

    bfef18a61275722889b9a162488fb0abb05dfb4c1d46fd9516312eaf4b21270cc6d0daa0cdd8c6804329cd7ddf591745f284b2dc7fa90575889c9326f194bcc5

  • SSDEEP

    768:/FXe5xE2BvPjlPrCUgAYaC4pJxxUIC9qn2a/zKuzzxxH4uxj8bxY1pxhOU8:Ca2BDlPrCUg5R4pJbg942sKsxRqA3hOn

Score
9/10
upx

Malware Config

Signatures

  • Nirsoft 1 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\iecv.exe
    "C:\Users\Admin\AppData\Local\Temp\iecv.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:1320

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1320-133-0x0000000000400000-0x0000000000428000-memory.dmp

    Filesize

    160KB

  • memory/1320-134-0x0000000000400000-0x0000000000428000-memory.dmp

    Filesize

    160KB