Analysis

  • max time kernel
    146s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/10/2023, 12:16

General

  • Target

    1c97efb05cf5e002a6321241c41426a7224766d0578c56cec6100da30685b41d.exe

  • Size

    15.2MB

  • MD5

    e9ddedd9d04dffed9b64b9288ef85791

  • SHA1

    f1a5f253e2645aabc32395631801fd6cc1532534

  • SHA256

    1c97efb05cf5e002a6321241c41426a7224766d0578c56cec6100da30685b41d

  • SHA512

    891803232b9ef5ec5a4990ea8d8e9cdda77f2b5febb4b7e89425535cd795ee6e2ab913a31ccde94fd67fd09accd4701677fc3db597a8747d05d0a886dbbbcdab

  • SSDEEP

    98304:0GzgrBKf843r5kRMrYNxWaf4ukr82etmNc6JEztAXMbQMgbOU:+cf84b576xWaf4ukr8LtmNc6Jz7Hl

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1c97efb05cf5e002a6321241c41426a7224766d0578c56cec6100da30685b41d.exe
    "C:\Users\Admin\AppData\Local\Temp\1c97efb05cf5e002a6321241c41426a7224766d0578c56cec6100da30685b41d.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4956

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4956-0-0x0000000000400000-0x00000000005F5000-memory.dmp

    Filesize

    2.0MB

  • memory/4956-1-0x0000000010000000-0x0000000010018000-memory.dmp

    Filesize

    96KB

  • memory/4956-3-0x00000000753B0000-0x00000000754A0000-memory.dmp

    Filesize

    960KB

  • memory/4956-4-0x00000000753B0000-0x00000000754A0000-memory.dmp

    Filesize

    960KB

  • memory/4956-5-0x0000000000400000-0x00000000005F5000-memory.dmp

    Filesize

    2.0MB

  • memory/4956-6-0x0000000010000000-0x0000000010018000-memory.dmp

    Filesize

    96KB

  • memory/4956-7-0x00000000753B0000-0x00000000754A0000-memory.dmp

    Filesize

    960KB