Analysis

  • max time kernel
    142s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/09/2023, 01:36 UTC

General

  • Target

    153084968e7ced40c78a5a82efe17e36aea18892e3c5e20a49a0f0ec20978c8f.exe

  • Size

    1.4MB

  • MD5

    9179f2c7c24210ba515cd0d1b769db6d

  • SHA1

    e09961b6f0efca7a29841686da470ac9200e09e9

  • SHA256

    153084968e7ced40c78a5a82efe17e36aea18892e3c5e20a49a0f0ec20978c8f

  • SHA512

    75f805237099d3f016ad840a069f48a868df5f51279f23ce3e51b12d18cd90ed6da06c8a21fd289f26eae45457002e4b314c36a4fe00189becf893ce8eae8572

  • SSDEEP

    24576:6Ts1OYFnPegSv71tUVQMKYkgvb2UReK2:6oPeT1taQ/YkItReK2

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 25 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\153084968e7ced40c78a5a82efe17e36aea18892e3c5e20a49a0f0ec20978c8f.exe
    "C:\Users\Admin\AppData\Local\Temp\153084968e7ced40c78a5a82efe17e36aea18892e3c5e20a49a0f0ec20978c8f.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3584

Network

  • flag-us
    DNS
    8.8.8.8.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    8.8.8.8.in-addr.arpa
    IN PTR
    Response
    8.8.8.8.in-addr.arpa
    IN PTR
    dnsgoogle
  • flag-us
    DNS
    136.71.105.51.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    136.71.105.51.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    126.20.238.8.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    126.20.238.8.in-addr.arpa
    IN PTR
    Response
No results found
  • 8.8.8.8:53
    8.8.8.8.in-addr.arpa
    dns
    66 B
    90 B
    1
    1

    DNS Request

    8.8.8.8.in-addr.arpa

  • 8.8.8.8:53
    136.71.105.51.in-addr.arpa
    dns
    72 B
    158 B
    1
    1

    DNS Request

    136.71.105.51.in-addr.arpa

  • 8.8.8.8:53
    126.20.238.8.in-addr.arpa
    dns
    71 B
    125 B
    1
    1

    DNS Request

    126.20.238.8.in-addr.arpa

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3584-1-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3584-0-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3584-2-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3584-3-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3584-5-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3584-7-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3584-9-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3584-11-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3584-13-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3584-15-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3584-17-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3584-19-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3584-21-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3584-23-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3584-25-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3584-27-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3584-29-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3584-31-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3584-33-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3584-35-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3584-37-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3584-39-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3584-41-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3584-43-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3584-44-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.