Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    23-09-2023 04:03

General

  • Target

    㳣ýܹ/Զѹ2017.exe

  • Size

    884KB

  • MD5

    bb9b123f8cd2f8d8fae67c876ac2523d

  • SHA1

    f9d96a09749daefbee77395f36abc46bf35e0435

  • SHA256

    791c150089333a8bfdfe8f5224c0669c4448288395602cf0dfcfb6fd0673233e

  • SHA512

    ec5b9a061314827862afd3736b41ffe5791fac7c10ca0c078733d02123915cb0212ae43cc2e6127575b49102d334a7e47da46bea696b220574ca657a488cb522

  • SSDEEP

    12288:65xVf6omWDDZXjybQ0veHSWqBhDlIyGAR5nWFpPoS6O:65bi3WXZX+bDGHSHBNlIyGDbQO

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 24 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\㳣ýܹ\Զѹ2017.exe
    "C:\Users\Admin\AppData\Local\Temp\㳣ýܹ\Զѹ2017.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1888-1-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1888-3-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1888-2-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1888-5-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1888-8-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1888-10-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1888-12-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1888-14-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1888-20-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1888-18-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1888-16-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1888-23-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1888-29-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1888-27-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1888-32-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1888-25-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1888-34-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1888-36-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1888-39-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1888-44-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1888-41-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1888-46-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1888-49-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1888-50-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB