5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d

Analysis

max time kernel
216s
max time network
187s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
12/10/2023, 05:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe
Size

2.8MB
MD5

35e288c998c6bd998a015bc409d8e5e2
SHA1

62e2b709f96d0ac168a9909ee48b81bc803b93c7
SHA256

5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d
SHA512

932446a648339e33fb1aff05b0ef31f2ca2e8f09da5b22025c401aabca758d4130368c7d2a008963d57d48d02bec2f030ddbd216cf743565f72a86763d4e9aa3
SSDEEP

49152:ra7vo3ZM0DqFJckphaaB6PtjPxWK1hOhhZmy4AQoTbO0tIsJ:ra7ApT+FJu7HfLEbQoTbOOJ

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 9 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/2708-8704-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2708-8730-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2708-8734-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2708-8742-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2708-8738-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2708-8745-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2708-8750-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2708-8754-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral1/memory/2708-8755-0x0000000010000000-0x000000001003E000-memory.dmp	upx

Suspicious use of NtSetInformationThreadHideFromDebugger 22 IoCs

pid	Process
2708	5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe
2708	5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe
2708	5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe
2708	5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe
2708	5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe
2708	5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe
2708	5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe
2708	5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe
2708	5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe
2708	5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe
2708	5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe
2708	5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe
2708	5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe
2708	5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe
2708	5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe
2708	5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe
2708	5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe
2708	5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe
2708	5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe
2708	5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe
2708	5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe
2708	5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2708	5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe
2708	5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe
2708	5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe
2708	5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe

C:\Users\Admin\AppData\Local\Temp\5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe
"C:\Users\Admin\AppData\Local\Temp\5a4585eba262fa835563e5dafb33e22ae2fa7a79f26760defee00f3f67f4776d.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
PID:2708

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2708-0-0x0000000000400000-0x00000000009E8000-memory.dmp

Filesize
5.9MB

Download
memory/2708-1-0x0000000075340000-0x0000000075387000-memory.dmp

Filesize
284KB

Download
memory/2708-811-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-812-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-814-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-816-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-818-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-820-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-822-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-824-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-826-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-828-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-830-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-832-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-834-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-836-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-838-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-840-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-842-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-844-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-846-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-848-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-850-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-852-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-854-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-856-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-858-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-860-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-862-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-864-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-866-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-868-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-870-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-872-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-2547-0x00000000024F0000-0x0000000002671000-memory.dmp

Filesize
1.5MB

Download
memory/2708-8692-0x0000000000400000-0x00000000009E8000-memory.dmp

Filesize
5.9MB

Download
memory/2708-8693-0x00000000027A0000-0x00000000028B1000-memory.dmp

Filesize
1.1MB

Download
memory/2708-8694-0x0000000000400000-0x00000000009E8000-memory.dmp

Filesize
5.9MB

Download
memory/2708-8695-0x0000000000400000-0x00000000009E8000-memory.dmp

Filesize
5.9MB

Download
memory/2708-8696-0x0000000000400000-0x00000000009E8000-memory.dmp

Filesize
5.9MB

Download
memory/2708-8697-0x0000000000350000-0x0000000000383000-memory.dmp

Filesize
204KB

Download
memory/2708-8699-0x0000000000400000-0x00000000009E8000-memory.dmp

Filesize
5.9MB

Download
memory/2708-8704-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2708-8716-0x0000000000400000-0x00000000009E8000-memory.dmp

Filesize
5.9MB

Download
memory/2708-8730-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2708-8734-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2708-8742-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2708-8738-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2708-8745-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2708-8750-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2708-8754-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/2708-8755-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download