cc42c1bc7f4d5c752cfcc67a5524cd889858553ec3a288042dc23e1c3e4d3ae6

General

Target

cc42c1bc7f4d5c752cfcc67a5524cd889858553ec3a288042dc23e1c3e4d3ae6.exe
Size

3.2MB
MD5

9904bf3d1a69d4a276eaa54c99ed68da
SHA1

236a818ec48c32fd5a41333f208b7c416517f140
SHA256

cc42c1bc7f4d5c752cfcc67a5524cd889858553ec3a288042dc23e1c3e4d3ae6
SHA512

3472268362f937481c1ed087439c4b22de35c276303da7361a10b6df3377dd4bb8e40bec918a368a2edf3640dd8645d37ef155c67d272e23fd4891a439770433
SSDEEP

49152:/0RkWK7yqLba8fTL7dqhH3fZj3F0+s8KuqGaX0ToIBAUZLYG:c2WKeqLba8fTL0lZxJBAUZLV

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 25 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/2108-0-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2108-2-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2108-3-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2108-6-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2108-11-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2108-16-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2108-19-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2108-26-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2108-31-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2108-35-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2108-39-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2108-44-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2108-48-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2108-46-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2108-50-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2108-42-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2108-37-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2108-33-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2108-29-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2108-24-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2108-22-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2108-14-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2108-9-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2108-1-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2108-51-0x0000000010000000-0x000000001003E000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2720	2108	WerFault.exe	27

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2108	cc42c1bc7f4d5c752cfcc67a5524cd889858553ec3a288042dc23e1c3e4d3ae6.exe
2108	cc42c1bc7f4d5c752cfcc67a5524cd889858553ec3a288042dc23e1c3e4d3ae6.exe
2108	cc42c1bc7f4d5c752cfcc67a5524cd889858553ec3a288042dc23e1c3e4d3ae6.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2108 wrote to memory of 2720	2108	cc42c1bc7f4d5c752cfcc67a5524cd889858553ec3a288042dc23e1c3e4d3ae6.exe	28
PID 2108 wrote to memory of 2720	2108	cc42c1bc7f4d5c752cfcc67a5524cd889858553ec3a288042dc23e1c3e4d3ae6.exe	28
PID 2108 wrote to memory of 2720	2108	cc42c1bc7f4d5c752cfcc67a5524cd889858553ec3a288042dc23e1c3e4d3ae6.exe	28
PID 2108 wrote to memory of 2720	2108	cc42c1bc7f4d5c752cfcc67a5524cd889858553ec3a288042dc23e1c3e4d3ae6.exe	28

C:\Users\Admin\AppData\Local\Temp\cc42c1bc7f4d5c752cfcc67a5524cd889858553ec3a288042dc23e1c3e4d3ae6.exe
"C:\Users\Admin\AppData\Local\Temp\cc42c1bc7f4d5c752cfcc67a5524cd889858553ec3a288042dc23e1c3e4d3ae6.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2108
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2108 -s 316
  2⤵
  - Program crash
  PID:2720

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2108-0-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2108-2-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2108-3-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2108-6-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2108-11-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2108-16-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2108-19-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2108-26-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2108-31-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2108-35-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2108-39-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2108-44-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2108-48-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2108-46-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2108-50-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2108-42-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2108-37-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2108-33-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2108-29-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2108-24-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2108-22-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2108-14-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2108-9-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2108-1-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2108-51-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download

Analysis

Sharing