Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    08/10/2023, 00:53

General

  • Target

    e0769753b31f62ddee100edf97900bd94af865d7bffbd32b74d0081f3ca84e7c.exe

  • Size

    8.5MB

  • MD5

    b6c256d04cd1996f0f2a374965fadba1

  • SHA1

    cabdc995532ffc2fd6c38e0f8911cd3ef8cdf476

  • SHA256

    e0769753b31f62ddee100edf97900bd94af865d7bffbd32b74d0081f3ca84e7c

  • SHA512

    43144476bb81138b423d91ad9feead85673acaae2703a412a3b8d51920161c5e694237ddd82906597a7ad59866bff3ada77de0bd094b52a7dece85ba43e8e3ed

  • SSDEEP

    196608:5Al7Q+oSRYg8+XXNY3mNvY1s8gAxhikLGA:y5Q+bRz8+HNYWNvasawVA

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 25 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious behavior: EnumeratesProcesses 3 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e0769753b31f62ddee100edf97900bd94af865d7bffbd32b74d0081f3ca84e7c.exe
    "C:\Users\Admin\AppData\Local\Temp\e0769753b31f62ddee100edf97900bd94af865d7bffbd32b74d0081f3ca84e7c.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2872

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2872-0-0x0000000000240000-0x0000000000241000-memory.dmp

    Filesize

    4KB

  • memory/2872-3-0x0000000000400000-0x00000000014E6000-memory.dmp

    Filesize

    16.9MB

  • memory/2872-2-0x0000000000240000-0x0000000000241000-memory.dmp

    Filesize

    4KB

  • memory/2872-7-0x0000000000400000-0x00000000014E6000-memory.dmp

    Filesize

    16.9MB

  • memory/2872-6-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2872-16-0x0000000000270000-0x0000000000271000-memory.dmp

    Filesize

    4KB

  • memory/2872-14-0x0000000000270000-0x0000000000271000-memory.dmp

    Filesize

    4KB

  • memory/2872-11-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2872-9-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2872-5-0x0000000000240000-0x0000000000241000-memory.dmp

    Filesize

    4KB

  • memory/2872-21-0x0000000000280000-0x0000000000281000-memory.dmp

    Filesize

    4KB

  • memory/2872-19-0x0000000000280000-0x0000000000281000-memory.dmp

    Filesize

    4KB

  • memory/2872-26-0x0000000000290000-0x0000000000291000-memory.dmp

    Filesize

    4KB

  • memory/2872-24-0x0000000000290000-0x0000000000291000-memory.dmp

    Filesize

    4KB

  • memory/2872-29-0x00000000002A0000-0x00000000002A1000-memory.dmp

    Filesize

    4KB

  • memory/2872-31-0x00000000002A0000-0x00000000002A1000-memory.dmp

    Filesize

    4KB

  • memory/2872-32-0x00000000002B0000-0x00000000002B1000-memory.dmp

    Filesize

    4KB

  • memory/2872-34-0x00000000002B0000-0x00000000002B1000-memory.dmp

    Filesize

    4KB

  • memory/2872-37-0x0000000077190000-0x0000000077191000-memory.dmp

    Filesize

    4KB

  • memory/2872-36-0x00000000002B0000-0x00000000002B1000-memory.dmp

    Filesize

    4KB

  • memory/2872-41-0x0000000000400000-0x00000000014E6000-memory.dmp

    Filesize

    16.9MB

  • memory/2872-43-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2872-42-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2872-44-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2872-45-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2872-47-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2872-49-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2872-51-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2872-53-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2872-55-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2872-57-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2872-59-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2872-61-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2872-63-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2872-65-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2872-67-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2872-71-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2872-74-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2872-77-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2872-80-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2872-83-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2872-86-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2872-89-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2872-92-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2872-94-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2872-95-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2872-96-0x0000000000400000-0x00000000014E6000-memory.dmp

    Filesize

    16.9MB