Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
08-10-2023 07:08
General
-
Target
f3ad1829de9f42efa2d6dec81f48f3f1db2568e38d428dcb41b3ef4859c0200f.exe
-
Size
13.4MB
-
MD5
385bc87276c2e73c0773553a084e153e
-
SHA1
085f5b473cb26bca840ba93c80efbdb674b4649c
-
SHA256
f3ad1829de9f42efa2d6dec81f48f3f1db2568e38d428dcb41b3ef4859c0200f
-
SHA512
ef926062e72549c74768b94eb5c2a0b945f11e190b988f9dce79ba6d0a07ee10e1b85e134e3c79e4bc2c229b385ee5c93cd532076e1813fbe7be0ac8a5619aec
-
SSDEEP
49152:zEt/NDrbgfBEan6wYfxMzob2En/PrVJjtM0QqQXAg0Jrk:o1N/bgfqK6wYfxMzob5PxJj4qYEr
Score
7/10
Malware Config
Signatures
-
UPX packed file 8 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f3ad1829de9f42efa2d6dec81f48f3f1db2568e38d428dcb41b3ef4859c0200f.exe"C:\Users\Admin\AppData\Local\Temp\f3ad1829de9f42efa2d6dec81f48f3f1db2568e38d428dcb41b3ef4859c0200f.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.5MB
-
Filesize
96KB
-
Filesize
4.5MB
-
Filesize
4.5MB
-
Filesize
4.5MB
-
Filesize
4.5MB
-
Filesize
4.5MB
-
Filesize
96KB
-
Filesize
1.1MB
-
Filesize
1.1MB