Analysis

  • max time kernel
    74s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20230703-en
  • resource tags

    arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system
  • submitted
    12-07-2023 00:45

General

  • Target

    9bec6cd7c3d7e0a4b45463692246affaafa954b51b109885d8e765a116c54978.exe

  • Size

    816KB

  • MD5

    bf95da3fa980a11dc326a95a9ca66e96

  • SHA1

    ad27641503a7e6c166d61dc6db5be177c8a8154f

  • SHA256

    9bec6cd7c3d7e0a4b45463692246affaafa954b51b109885d8e765a116c54978

  • SHA512

    f47372c833307f0e488baa8f2021aa7e9eb59851bccf2ef9ef0f94ca3fca93855586618e0662a6bbc2c3dfd048fe9b2b26c17a7b56a4f2ee942335233088d315

  • SSDEEP

    12288:LoqsMl3uWg9P4RYS6KT26WzDYMZTcTmeu:LoqBle1P2YcT9WfY2TcTmeu

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9bec6cd7c3d7e0a4b45463692246affaafa954b51b109885d8e765a116c54978.exe
    "C:\Users\Admin\AppData\Local\Temp\9bec6cd7c3d7e0a4b45463692246affaafa954b51b109885d8e765a116c54978.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2988-54-0x00000000003C0000-0x00000000003CB000-memory.dmp

    Filesize

    44KB

  • memory/2988-55-0x00000000003C0000-0x00000000003CB000-memory.dmp

    Filesize

    44KB