b8de6a5f79e38376a2c7ea2511978cec9ffaff37269bd4eec083ba88bbe40af7

Analysis

max time kernel
98s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
12/10/2023, 08:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b8de6a5f79e38376a2c7ea2511978cec9ffaff37269bd4eec083ba88bbe40af7.exe
Size

1.8MB
MD5

dbddb0bf69f1b450a8130b64b2df481b
SHA1

b69fe58559845844a766c1b3d40edaf36290f229
SHA256

b8de6a5f79e38376a2c7ea2511978cec9ffaff37269bd4eec083ba88bbe40af7
SHA512

4161d9aa02f06eae6770637444ccb1fb0f4d2b777b3b16deb10fa047a148402a62555a9161b4c9625b3fac227951ca9fa16a6ce31cf62434b1df91aece54c4be
SSDEEP

24576:ObSnvajF8bOSBDIiSQXcnnmFCyFia9fbZ5byffh8K3fFi3fI:ObSnvajFeOSFSQwEN9fifqufU3g

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 25 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/3544-0-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral2/memory/3544-1-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral2/memory/3544-2-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral2/memory/3544-3-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral2/memory/3544-5-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral2/memory/3544-7-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral2/memory/3544-11-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral2/memory/3544-9-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral2/memory/3544-13-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral2/memory/3544-15-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral2/memory/3544-17-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral2/memory/3544-19-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral2/memory/3544-21-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral2/memory/3544-23-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral2/memory/3544-25-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral2/memory/3544-27-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral2/memory/3544-29-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral2/memory/3544-31-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral2/memory/3544-33-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral2/memory/3544-35-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral2/memory/3544-37-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral2/memory/3544-39-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral2/memory/3544-41-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral2/memory/3544-43-0x0000000010000000-0x000000001003E000-memory.dmp	upx
behavioral2/memory/3544-44-0x0000000010000000-0x000000001003E000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3544	b8de6a5f79e38376a2c7ea2511978cec9ffaff37269bd4eec083ba88bbe40af7.exe
3544	b8de6a5f79e38376a2c7ea2511978cec9ffaff37269bd4eec083ba88bbe40af7.exe
3544	b8de6a5f79e38376a2c7ea2511978cec9ffaff37269bd4eec083ba88bbe40af7.exe

C:\Users\Admin\AppData\Local\Temp\b8de6a5f79e38376a2c7ea2511978cec9ffaff37269bd4eec083ba88bbe40af7.exe
"C:\Users\Admin\AppData\Local\Temp\b8de6a5f79e38376a2c7ea2511978cec9ffaff37269bd4eec083ba88bbe40af7.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3544

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3544-0-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/3544-1-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/3544-2-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/3544-3-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/3544-5-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/3544-7-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/3544-11-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/3544-9-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/3544-13-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/3544-15-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/3544-17-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/3544-19-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/3544-21-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/3544-23-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/3544-25-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/3544-27-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/3544-29-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/3544-31-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/3544-33-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/3544-35-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/3544-37-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/3544-39-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/3544-41-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/3544-43-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download
memory/3544-44-0x0000000010000000-0x000000001003E000-memory.dmp

Filesize
248KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads