Analysis

  • max time kernel
    119s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    08/10/2023, 05:35

General

  • Target

    c3e490183501cecf022f7712c2b0f23b71bc061a5bd9abe694370827cafc765e.exe

  • Size

    1.3MB

  • MD5

    4cceef8d3d50af93d25eb805ce9e352b

  • SHA1

    218c4782e825bc4614a1ffed4f8dd11cfd58d769

  • SHA256

    c3e490183501cecf022f7712c2b0f23b71bc061a5bd9abe694370827cafc765e

  • SHA512

    dec5ccfbfb6144a15e19160f35b6f8b269854924388cbffb06f40ae8e582fa1ac0df0e3c35c2a213fd979ae482a32c79d32025f7d71f364560947507c69b5c67

  • SSDEEP

    24576:uPC+LjQuJDyWkbO/MAp84S2SMbzNQ8xTE516WeG3VW:uDj1yvCer2SMtxE5if

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 26 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c3e490183501cecf022f7712c2b0f23b71bc061a5bd9abe694370827cafc765e.exe
    "C:\Users\Admin\AppData\Local\Temp\c3e490183501cecf022f7712c2b0f23b71bc061a5bd9abe694370827cafc765e.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2992

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2992-0-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2992-3-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2992-5-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2992-9-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2992-19-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2992-17-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2992-22-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2992-15-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2992-13-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2992-27-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2992-25-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2992-11-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2992-7-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2992-30-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2992-35-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2992-39-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2992-37-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2992-42-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2992-48-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2992-46-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2992-44-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2992-32-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2992-2-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2992-1-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2992-50-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2992-51-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB