1027f1da5824eca535973b1c51aa4afef29eb0dee08ddb428cd892dc6964fdd4

Analysis

max time kernel
142s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
02-10-2023 12:09

Target

9be349a73eaf8c768f2d1db0fdb8011c7ff9013df5f88c81a6e488605d3bc8dc.exe
Size

487KB
MD5

6d92693184b5c6e9d45d6f6b1d758168
SHA1

f0538ed31c56de1d346de1413971454c1a4278d4
SHA256

9be349a73eaf8c768f2d1db0fdb8011c7ff9013df5f88c81a6e488605d3bc8dc
SHA512

f3eb9861b300338a9b755703aedce243b0f959faf126cbed498c12b7d8e305c8abb7fc1e498d2136ca5fa3ebdf4a59e03d295aff9720e6faba734734092f31cd
SSDEEP

12288:5yli+aAgeV47nMVebG9gBaV0UazLTtfG7:57+RgPTTbG9gNRzc7

Score

7^/10

upx

UPX packed file 15 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/2912-0-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral2/memory/2912-1-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral2/memory/2912-2-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral2/memory/2912-3-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral2/memory/2912-4-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral2/memory/2912-5-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral2/memory/2912-6-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral2/memory/2912-7-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral2/memory/2912-8-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral2/memory/2912-9-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral2/memory/2912-10-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral2/memory/2912-11-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral2/memory/2912-12-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral2/memory/2912-13-0x0000000000400000-0x0000000000510000-memory.dmp	upx
behavioral2/memory/2912-14-0x0000000000400000-0x0000000000510000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2912	9be349a73eaf8c768f2d1db0fdb8011c7ff9013df5f88c81a6e488605d3bc8dc.exe
2912	9be349a73eaf8c768f2d1db0fdb8011c7ff9013df5f88c81a6e488605d3bc8dc.exe

C:\Users\Admin\AppData\Local\Temp\9be349a73eaf8c768f2d1db0fdb8011c7ff9013df5f88c81a6e488605d3bc8dc.exe
"C:\Users\Admin\AppData\Local\Temp\9be349a73eaf8c768f2d1db0fdb8011c7ff9013df5f88c81a6e488605d3bc8dc.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2912

memory/2912-0-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2912-1-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2912-2-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2912-3-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2912-4-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2912-5-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2912-6-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2912-7-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2912-8-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2912-9-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2912-10-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2912-11-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2912-12-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2912-13-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download
memory/2912-14-0x0000000000400000-0x0000000000510000-memory.dmp

Filesize
1.1MB

Download