9a70eac9c91b0460b6f56ea88bda62d50fe2c4e7162f5e540033782995b6a12b

Analysis

max time kernel
142s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
31-10-2023 14:07

Target

ecee0e9231f58ec7b165f67b2513417c8f8081e0a54eba0bf84813133c521905.exe
Size

1.7MB
MD5

5dc2c7a4e94af9506a1a89348ab215d9
SHA1

137b9cf13fe98e9fe3fc4efc746ed8fb78781585
SHA256

ecee0e9231f58ec7b165f67b2513417c8f8081e0a54eba0bf84813133c521905
SHA512

7dd80c5684d1344f2383608e48cc82d33d7f69e1b2193244abfcc8859a4afcc8fe5116f4be299f59ec704aaa3cbe6dc7369e50fc6ed7fa1d1275bf8684e420fc
SSDEEP

49152:xE5hYlIsxOCsTcF7HJG+C2qanz/jEKWiynnLi16x:S5SlIiObIj05

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/1692-0-0x0000000000400000-0x0000000000F23000-memory.dmp	upx
behavioral2/memory/1692-3-0x0000000000400000-0x0000000000F23000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1692	ecee0e9231f58ec7b165f67b2513417c8f8081e0a54eba0bf84813133c521905.exe

C:\Users\Admin\AppData\Local\Temp\ecee0e9231f58ec7b165f67b2513417c8f8081e0a54eba0bf84813133c521905.exe
"C:\Users\Admin\AppData\Local\Temp\ecee0e9231f58ec7b165f67b2513417c8f8081e0a54eba0bf84813133c521905.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1692

memory/1692-0-0x0000000000400000-0x0000000000F23000-memory.dmp

Filesize
11.1MB

Download
memory/1692-3-0x0000000000400000-0x0000000000F23000-memory.dmp

Filesize
11.1MB

Download