Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
08-10-2023 04:19
General
-
Target
c638593284640d5b6d9f63f2f54fbd2ac241cd2a4fb88b0af5066076a0b4ed67.exe
-
Size
4.7MB
-
MD5
b751524a3a7131d000f2029492f21f41
-
SHA1
5d8574ed922eb60538908e1f91f39dd102f24b9b
-
SHA256
c638593284640d5b6d9f63f2f54fbd2ac241cd2a4fb88b0af5066076a0b4ed67
-
SHA512
8a01197b892c5a7ae2c3ee7d52e172a006944e706c9b55dc4d4079806fd20ab1ba7d830fbee29650cdb627441b407d3b9630f739b499570c1ac15a3c1b1f8261
-
SSDEEP
98304:g/sSDNVYSi1HkfXB3ZFPylMuvMoVzojsn:GsSRCSSkfX5Zpy10oJoj
Score
7/10
Malware Config
Signatures
-
UPX packed file 25 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c638593284640d5b6d9f63f2f54fbd2ac241cd2a4fb88b0af5066076a0b4ed67.exe"C:\Users\Admin\AppData\Local\Temp\c638593284640d5b6d9f63f2f54fbd2ac241cd2a4fb88b0af5066076a0b4ed67.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10.6MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
10.6MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
4KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
10.6MB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
10.6MB