37c8b5a5ae3c3616f75e77291868b6d3d6a841701eb492dcfc429287ad4ad459

Analysis

max time kernel
122s
max time network
132s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
11-10-2023 21:01

Target

37c8b5a5ae3c3616f75e77291868b6d3d6a841701eb492dcfc429287ad4ad459.exe
Size

2.4MB
MD5

505b4534155bf671f26333694d94c32d
SHA1

b5f3800f7164308215957d6e3b115e11437b9c8b
SHA256

37c8b5a5ae3c3616f75e77291868b6d3d6a841701eb492dcfc429287ad4ad459
SHA512

ef1c26047b771dc4da32a2bcdcc428e48ddd85b553850ddc3d233b570742f706472df8d65af2b35c590086c5a57973ed44785c9abe917843a28033ddef959aa4
SSDEEP

49152:finYmisZs4lG4CNck6EM1y5dRl1SupO191k+wSLIOMBw:XMZs4lG4CNP6E8y5p1tpY1bLIO

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2228-1-0x0000000010000000-0x0000000010018000-memory.dmp	upx
behavioral1/memory/2228-3-0x0000000010000000-0x0000000010018000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2228	37c8b5a5ae3c3616f75e77291868b6d3d6a841701eb492dcfc429287ad4ad459.exe
2228	37c8b5a5ae3c3616f75e77291868b6d3d6a841701eb492dcfc429287ad4ad459.exe
2228	37c8b5a5ae3c3616f75e77291868b6d3d6a841701eb492dcfc429287ad4ad459.exe
2228	37c8b5a5ae3c3616f75e77291868b6d3d6a841701eb492dcfc429287ad4ad459.exe

C:\Users\Admin\AppData\Local\Temp\37c8b5a5ae3c3616f75e77291868b6d3d6a841701eb492dcfc429287ad4ad459.exe
"C:\Users\Admin\AppData\Local\Temp\37c8b5a5ae3c3616f75e77291868b6d3d6a841701eb492dcfc429287ad4ad459.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2228

memory/2228-1-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/2228-2-0x0000000000380000-0x00000000003CB000-memory.dmp

Filesize
300KB

Download
memory/2228-3-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download