1027f1da5824eca535973b1c51aa4afef29eb0dee08ddb428cd892dc6964fdd4

Analysis

max time kernel
156s
max time network
138s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
02/10/2023, 12:09 UTC

Target

9be349a73eaf8c768f2d1db0fdb8011c7ff9013df5f88c81a6e488605d3bc8dc.exe
Size

487KB
MD5

6d92693184b5c6e9d45d6f6b1d758168
SHA1

f0538ed31c56de1d346de1413971454c1a4278d4
SHA256

9be349a73eaf8c768f2d1db0fdb8011c7ff9013df5f88c81a6e488605d3bc8dc
SHA512

f3eb9861b300338a9b755703aedce243b0f959faf126cbed498c12b7d8e305c8abb7fc1e498d2136ca5fa3ebdf4a59e03d295aff9720e6faba734734092f31cd
SSDEEP

12288:5yli+aAgeV47nMVebG9gBaV0UazLTtfG7:57+RgPTTbG9gNRzc7

Score

7^/10

upx

UPX packed file 15 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2552-0-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral1/memory/2552-1-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral1/memory/2552-2-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral1/memory/2552-3-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral1/memory/2552-4-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral1/memory/2552-5-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral1/memory/2552-6-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral1/memory/2552-7-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral1/memory/2552-8-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral1/memory/2552-9-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral1/memory/2552-10-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral1/memory/2552-11-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral1/memory/2552-12-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral1/memory/2552-13-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral1/memory/2552-14-0x0000000000400000-0x0000000000510000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2552	9be349a73eaf8c768f2d1db0fdb8011c7ff9013df5f88c81a6e488605d3bc8dc.exe
2552	9be349a73eaf8c768f2d1db0fdb8011c7ff9013df5f88c81a6e488605d3bc8dc.exe

C:\Users\Admin\AppData\Local\Temp\9be349a73eaf8c768f2d1db0fdb8011c7ff9013df5f88c81a6e488605d3bc8dc.exe
"C:\Users\Admin\AppData\Local\Temp\9be349a73eaf8c768f2d1db0fdb8011c7ff9013df5f88c81a6e488605d3bc8dc.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2552

memory/2552-0-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2552-1-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2552-2-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2552-3-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2552-4-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2552-5-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2552-6-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2552-7-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2552-8-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2552-9-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2552-10-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2552-11-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2552-12-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2552-13-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2552-14-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download