Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    18-09-2023 05:29

General

  • Target

    c2a96a1aa786208aff79b2c7c5443cb97b6ba3e81bf88ae18cc853377537cf16.exe

  • Size

    2.9MB

  • MD5

    ac2cdbd6e9b719567e2bbdb352f386b5

  • SHA1

    67190722c2fe340aa98b5766454ce8692620162d

  • SHA256

    c2a96a1aa786208aff79b2c7c5443cb97b6ba3e81bf88ae18cc853377537cf16

  • SHA512

    64c37b31262705ebaf68864eec9e5249102af0745696d5ddd72855ab67ec96792785ca531e1e73bdf1242e6fee670e6f0400c2c2a6d32a51b070cc8d04a1fac3

  • SSDEEP

    49152:gFe0A8Nm1JCyD8djTZm0yt00jFUqRk/yhPRVs/qZ4qtD56Og/gtQf3P8/:CmHCyD8doJ5DiU/

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c2a96a1aa786208aff79b2c7c5443cb97b6ba3e81bf88ae18cc853377537cf16.exe
    "C:\Users\Admin\AppData\Local\Temp\c2a96a1aa786208aff79b2c7c5443cb97b6ba3e81bf88ae18cc853377537cf16.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1100-0-0x0000000010000000-0x0000000010018000-memory.dmp

    Filesize

    96KB

  • memory/1100-1-0x0000000010000000-0x0000000010018000-memory.dmp

    Filesize

    96KB

  • memory/1100-2-0x0000000000390000-0x00000000003D8000-memory.dmp

    Filesize

    288KB

  • memory/1100-3-0x0000000000390000-0x00000000003D8000-memory.dmp

    Filesize

    288KB

  • memory/1100-4-0x00000000003F0000-0x00000000003F1000-memory.dmp

    Filesize

    4KB

  • memory/1100-5-0x0000000010000000-0x0000000010018000-memory.dmp

    Filesize

    96KB