bc648915747d5be3f5b76ce086d0058fba7c20a2c52ad759a8e6ef30e8a372c1

Analysis

max time kernel
118s
max time network
141s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
07/11/2023, 04:48

Target

bc648915747d5be3f5b76ce086d0058fba7c20a2c52ad759a8e6ef30e8a372c1.exe
Size

708KB
MD5

bae2477745bcc441780994168a903df8
SHA1

af8530f16dd6f44d69196e1389830d130949a820
SHA256

bc648915747d5be3f5b76ce086d0058fba7c20a2c52ad759a8e6ef30e8a372c1
SHA512

63e86be5bb63f713f325af4390d6323044083a6d133cb3ad97fa6fcc03391e60623324f42d2862deca48ad96c0a33acd9362d3d22a3cd14291ebfe1dd5bf369f
SSDEEP

12288:CMhFmpBlRIjNkZROcOoSrpATZManwmZvumV3zsoItvgI9Wj+AI+CvIbsCdVqJCk0:qiSsZp+nwmZvumNzsNgBj+AQXJaG

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2756-0-0x0000000000400000-0x00000000005A2000-memory.dmp	upx
behavioral1/memory/2756-1-0x0000000000400000-0x00000000005A2000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2756	bc648915747d5be3f5b76ce086d0058fba7c20a2c52ad759a8e6ef30e8a372c1.exe
2756	bc648915747d5be3f5b76ce086d0058fba7c20a2c52ad759a8e6ef30e8a372c1.exe

C:\Users\Admin\AppData\Local\Temp\bc648915747d5be3f5b76ce086d0058fba7c20a2c52ad759a8e6ef30e8a372c1.exe
"C:\Users\Admin\AppData\Local\Temp\bc648915747d5be3f5b76ce086d0058fba7c20a2c52ad759a8e6ef30e8a372c1.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2756

memory/2756-0-0x0000000000400000-0x00000000005A2000-memory.dmp

Filesize
1.6MB

Download
memory/2756-1-0x0000000000400000-0x00000000005A2000-memory.dmp

Filesize
1.6MB

Download