Analysis

  • max time kernel
    121s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    18-08-2023 19:42

General

  • Target

    f29d788f45ddd0aef472a0e768b78f5db303b14f24ac3dff34f49b14facacc7b.exe

  • Size

    1.0MB

  • MD5

    8565e603f17b04dfa050f9eb35c7eadb

  • SHA1

    c4b370b398c0a2a688bfae4196a03a8a65376276

  • SHA256

    f29d788f45ddd0aef472a0e768b78f5db303b14f24ac3dff34f49b14facacc7b

  • SHA512

    73c489783505be68a5fd6f858ccbcc980e951272aeaa982c9f8d0d8ee3d67f10d259b2d5bfd0e797a68d16ab496d4d5e728390a1c12a77663ed3b0252b268655

  • SSDEEP

    24576:kFfDyhvC//Srd954Qz1E2KJ+94P6clSHczd4/0y:k9Sf1El+94P6cUHKd9y

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f29d788f45ddd0aef472a0e768b78f5db303b14f24ac3dff34f49b14facacc7b.exe
    "C:\Users\Admin\AppData\Local\Temp\f29d788f45ddd0aef472a0e768b78f5db303b14f24ac3dff34f49b14facacc7b.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1912

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1912-54-0x00000000002D0000-0x00000000002DB000-memory.dmp

    Filesize

    44KB

  • memory/1912-55-0x00000000002D0000-0x00000000002DB000-memory.dmp

    Filesize

    44KB

  • memory/1912-56-0x00000000002D0000-0x00000000002DB000-memory.dmp

    Filesize

    44KB