Overview

overview

7

Static

static

3

cbf4d33ead...a4.exe

windows7-x64

7

cbf4d33ead...a4.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    10/10/2023, 03:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    cbf4d33eada8fb0c086d58a677c3cf26d12a7211af2427df1743d04187bd32a4.exe

  • Size

    6.9MB

  • MD5

    f09db0a2cac45bb40d5ba0140adface2

  • SHA1

    551573a15dbd2ef4fdc4d19f12fdc3ddbb53def2

  • SHA256

    cbf4d33eada8fb0c086d58a677c3cf26d12a7211af2427df1743d04187bd32a4

  • SHA512

    1bdc8676b30574895173b8db2b75eb62ba38c4f471c135b2efbb561e85849558037c8022c0659698c17318fb1b7855d7a6680cb70a01d281caea9b6b276641fe

  • SSDEEP

    49152:ct6xeloRWvomFwqmyxO7N6yaKCbafluALfx3rqxDdJQZcuM09f4btRe:TAoRgFwwE7bCm9uALfprsQb96I

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cbf4d33eada8fb0c086d58a677c3cf26d12a7211af2427df1743d04187bd32a4.exe
    "C:\Users\Admin\AppData\Local\Temp\cbf4d33eada8fb0c086d58a677c3cf26d12a7211af2427df1743d04187bd32a4.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1784

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1784-1-0x0000000010000000-0x000000001000B000-memory.dmp

    Filesize

    44KB

    Download