Analysis

  • max time kernel
    144s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    08-10-2023 14:11

General

  • Target

    1053a21aaf94a3db927671e8861180cdd7f7d856dfab525f35089d1eab2d10c5.exe

  • Size

    1.5MB

  • MD5

    896a4bfdc937674aca3163b6c5c536fb

  • SHA1

    eeebbb8e47b0788ef81963f00df20f7e2d9797d3

  • SHA256

    1053a21aaf94a3db927671e8861180cdd7f7d856dfab525f35089d1eab2d10c5

  • SHA512

    a4ec45cf42da11ea17086e23034b0768bf9aced8d23065f22cd65a1523413d0dc8bfcdf8aa2228bd8169c91db6d69204531d910898792fc778e09530840f6fdf

  • SSDEEP

    24576:yRCyiDUmnp901byAJpYGDWrIP10L/wB8ispANa+GkkjfbsF:6aFnTAJLKFpA8kkz

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 31 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 15 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1053a21aaf94a3db927671e8861180cdd7f7d856dfab525f35089d1eab2d10c5.exe
    "C:\Users\Admin\AppData\Local\Temp\1053a21aaf94a3db927671e8861180cdd7f7d856dfab525f35089d1eab2d10c5.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2356

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2356-0-0x00000000003E0000-0x00000000003EB000-memory.dmp

    Filesize

    44KB

  • memory/2356-1-0x00000000003E0000-0x00000000003EB000-memory.dmp

    Filesize

    44KB

  • memory/2356-2-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-4-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-5-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-7-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-10-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-16-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-18-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-20-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-25-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-23-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-28-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-32-0x00000000003E0000-0x00000000003EB000-memory.dmp

    Filesize

    44KB

  • memory/2356-30-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-14-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-12-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-8-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-6-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-33-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-35-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-37-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-41-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-43-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-45-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-51-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-49-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-47-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-39-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-52-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2356-53-0x0000000076AB0000-0x0000000076BB0000-memory.dmp

    Filesize

    1024KB

  • memory/2356-54-0x0000000076AB0000-0x0000000076BB0000-memory.dmp

    Filesize

    1024KB