Analysis

  • max time kernel
    117s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    09/10/2023, 15:38

General

  • Target

    27d29409969d656c0bb12cb268f8d7e711c28338e55c43f6bceb6a5204c38a10.exe

  • Size

    1.4MB

  • MD5

    b4030a0a09b3edd9b0e5c4a39b5c2848

  • SHA1

    319de842659db1eab07a2dedea4534b9e2d871a2

  • SHA256

    27d29409969d656c0bb12cb268f8d7e711c28338e55c43f6bceb6a5204c38a10

  • SHA512

    86428f2986c2675fdba60415707e918f18eb05f492b6730f73a9a017fe843dc24465824961d697aefab62fda40d1bae76ab68ed436ff595555ba30f77b2631dd

  • SSDEEP

    24576:hUh4akfFK+CX1wXWQ3ydvbHoArkzazlMxwFaXmyx0pbJicsFw0i7OVvwqyVYEpvQ:hUD9TW1iSArlzlMx5Bx0pccsFw0i7OG8

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 25 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\27d29409969d656c0bb12cb268f8d7e711c28338e55c43f6bceb6a5204c38a10.exe
    "C:\Users\Admin\AppData\Local\Temp\27d29409969d656c0bb12cb268f8d7e711c28338e55c43f6bceb6a5204c38a10.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2424

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2424-0-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2424-2-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2424-3-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2424-5-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2424-7-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2424-12-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2424-16-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2424-18-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2424-23-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2424-25-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2424-29-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2424-31-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2424-35-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2424-37-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2424-41-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2424-45-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2424-43-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2424-39-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2424-33-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2424-27-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2424-21-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2424-14-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2424-10-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2424-1-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2424-46-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB