Analysis
-
max time kernel
122s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
10/10/2023, 21:09
General
-
Target
de4d540495ac01e699ad780340181597a063bbf4836551f2253e26716665506d.exe
-
Size
4.8MB
-
MD5
642e0e0558766bf324d6fbcb7d72a322
-
SHA1
12f057b8369d85b946e701e6f8380a6b6fb7d477
-
SHA256
de4d540495ac01e699ad780340181597a063bbf4836551f2253e26716665506d
-
SHA512
c0e2c49cab2076aaaf5c9ebb5e14c4c4acd0a7642a2aa9a1b13014ee1ebb422e35386040314ae4b5723d154db942d30c5481ec6b459ebb0e20bbeac11c74473a
-
SSDEEP
49152:2JAPtjadNER68ZCAOUJEfKElJzz9BCuZYSoQNYGBhNj6OLO+s8KuqGaX0ToIBAUy:IA768ZwUJWKqz9QQTJBAUZL1q
Score
7/10
Malware Config
Signatures
-
UPX packed file 25 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\de4d540495ac01e699ad780340181597a063bbf4836551f2253e26716665506d.exe"C:\Users\Admin\AppData\Local\Temp\de4d540495ac01e699ad780340181597a063bbf4836551f2253e26716665506d.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2492 -s 13682⤵
- Program crash
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB