Overview

overview

7

Static

static

3

551b9efd46...0a.exe

windows7-x64

7

551b9efd46...0a.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    13/10/2023, 03:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    551b9efd465d672becba2addfe5a173bf16391350dc24c859834b4a46616fd0a.exe

  • Size

    2.1MB

  • MD5

    ac486b4f6bec992f206e45f70abb4eea

  • SHA1

    2f322f820ed0c11ad99ee310824e0d4af758cb17

  • SHA256

    551b9efd465d672becba2addfe5a173bf16391350dc24c859834b4a46616fd0a

  • SHA512

    f79c6519924c527300961742ff101fa4e29393c2fa1d6ef81c117f8e2a4edba94ff0c7f8bf0ea5bc13f2bb4c207b712e3f957d6c02b2bee2e6d8aa3349ec61b6

  • SSDEEP

    49152:aIvGN3BlUw6d3JebxK0WEVdF9DcMrfnG:Pv0HUw6d3JedKD+F9DcMLn

Score
7/10
upx

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • UPX packed file 5 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\551b9efd465d672becba2addfe5a173bf16391350dc24c859834b4a46616fd0a.exe
    "C:\Users\Admin\AppData\Local\Temp\551b9efd465d672becba2addfe5a173bf16391350dc24c859834b4a46616fd0a.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1612
    • \??\c:\admin.exe
      c:\admin.exe
      2⤵
      • Executes dropped EXE
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of SetWindowsHookEx
      PID:2300

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\admin.exe
    Filesize

    372KB

    MD5

    9ed304603b3c00d5168b76a0b61332f0

    SHA1

    50f57ac837f9a325058a73181a4d33e2a66b4f8d

    SHA256

    1ce90640766c1c1bb7d18fc94f429b794811d11d1a0b627696ab07f9075f7114

    SHA512

    b96358c2c8950454c5ef17438ecd02525d116447af6ecefa9cdaaddd7b18634c46b23252d3d26f3c46c50df470ed9a405f652c53798e0d6a39c28f6a112d5af4

    Download Submit

  • C:\admin.exe
    Filesize

    372KB

    MD5

    9ed304603b3c00d5168b76a0b61332f0

    SHA1

    50f57ac837f9a325058a73181a4d33e2a66b4f8d

    SHA256

    1ce90640766c1c1bb7d18fc94f429b794811d11d1a0b627696ab07f9075f7114

    SHA512

    b96358c2c8950454c5ef17438ecd02525d116447af6ecefa9cdaaddd7b18634c46b23252d3d26f3c46c50df470ed9a405f652c53798e0d6a39c28f6a112d5af4

    Download Submit

  • memory/1612-6-0x00000000021A0000-0x00000000022B5000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1612-10-0x00000000021A0000-0x00000000022B5000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2300-7-0x0000000000400000-0x0000000000515000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2300-11-0x0000000000400000-0x0000000000515000-memory.dmp

    Filesize

    1.1MB

    Download