Analysis

  • max time kernel
    123s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18-09-2023 05:29

General

  • Target

    c2a96a1aa786208aff79b2c7c5443cb97b6ba3e81bf88ae18cc853377537cf16.exe

  • Size

    2.9MB

  • MD5

    ac2cdbd6e9b719567e2bbdb352f386b5

  • SHA1

    67190722c2fe340aa98b5766454ce8692620162d

  • SHA256

    c2a96a1aa786208aff79b2c7c5443cb97b6ba3e81bf88ae18cc853377537cf16

  • SHA512

    64c37b31262705ebaf68864eec9e5249102af0745696d5ddd72855ab67ec96792785ca531e1e73bdf1242e6fee670e6f0400c2c2a6d32a51b070cc8d04a1fac3

  • SSDEEP

    49152:gFe0A8Nm1JCyD8djTZm0yt00jFUqRk/yhPRVs/qZ4qtD56Og/gtQf3P8/:CmHCyD8doJ5DiU/

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c2a96a1aa786208aff79b2c7c5443cb97b6ba3e81bf88ae18cc853377537cf16.exe
    "C:\Users\Admin\AppData\Local\Temp\c2a96a1aa786208aff79b2c7c5443cb97b6ba3e81bf88ae18cc853377537cf16.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4404

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4404-1-0x0000000010000000-0x0000000010018000-memory.dmp

    Filesize

    96KB

  • memory/4404-0-0x0000000000E60000-0x0000000000E61000-memory.dmp

    Filesize

    4KB

  • memory/4404-2-0x0000000000E60000-0x0000000000E61000-memory.dmp

    Filesize

    4KB

  • memory/4404-3-0x0000000000E50000-0x0000000000E98000-memory.dmp

    Filesize

    288KB

  • memory/4404-4-0x0000000000E50000-0x0000000000E98000-memory.dmp

    Filesize

    288KB

  • memory/4404-5-0x0000000010000000-0x0000000010018000-memory.dmp

    Filesize

    96KB

  • memory/4404-6-0x0000000000E60000-0x0000000000E61000-memory.dmp

    Filesize

    4KB

  • memory/4404-7-0x0000000002780000-0x0000000002781000-memory.dmp

    Filesize

    4KB

  • memory/4404-8-0x0000000002780000-0x0000000002781000-memory.dmp

    Filesize

    4KB

  • memory/4404-9-0x0000000002780000-0x0000000002781000-memory.dmp

    Filesize

    4KB