Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    07/12/2023, 10:27

General

  • Target

    08502acb78bbd00ef679593e152fb7637dbde654a1c542e40de8d03a2f750540.exe

  • Size

    8.2MB

  • MD5

    b24dbc2014faa229ab80b5e891137a49

  • SHA1

    f004e7a4cd8649bc74e12edf322243e2a5e794d6

  • SHA256

    08502acb78bbd00ef679593e152fb7637dbde654a1c542e40de8d03a2f750540

  • SHA512

    cb78d7f7fcff2f13e590ac6f60ca8d05329587815a73df8a30eb8eb6953332bd83ea5a10555af96cf4851f3c33bbf306c887bd8ebc7bae5cf4683e811d463277

  • SSDEEP

    196608:czGHLnxSqXBY4tRekoakad5xSgra1NhTqxWLOcWFsRcj+9uL:KG3XBj0koNS5Igra1/qxabK+UL

Score
7/10

Malware Config

Signatures

  • UPX packed file 20 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\08502acb78bbd00ef679593e152fb7637dbde654a1c542e40de8d03a2f750540.exe
    "C:\Users\Admin\AppData\Local\Temp\08502acb78bbd00ef679593e152fb7637dbde654a1c542e40de8d03a2f750540.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2356

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2356-0-0x0000000000230000-0x0000000000231000-memory.dmp

          Filesize

          4KB

        • memory/2356-2-0x0000000000400000-0x0000000001355000-memory.dmp

          Filesize

          15.3MB

        • memory/2356-3-0x0000000000230000-0x0000000000231000-memory.dmp

          Filesize

          4KB

        • memory/2356-8-0x0000000000240000-0x0000000000241000-memory.dmp

          Filesize

          4KB

        • memory/2356-13-0x0000000000250000-0x0000000000251000-memory.dmp

          Filesize

          4KB

        • memory/2356-20-0x0000000000260000-0x0000000000261000-memory.dmp

          Filesize

          4KB

        • memory/2356-30-0x0000000000290000-0x0000000000291000-memory.dmp

          Filesize

          4KB

        • memory/2356-28-0x0000000000290000-0x0000000000291000-memory.dmp

          Filesize

          4KB

        • memory/2356-35-0x00000000002A0000-0x00000000002A1000-memory.dmp

          Filesize

          4KB

        • memory/2356-33-0x00000000002A0000-0x00000000002A1000-memory.dmp

          Filesize

          4KB

        • memory/2356-37-0x00000000778B0000-0x00000000778B1000-memory.dmp

          Filesize

          4KB

        • memory/2356-31-0x00000000002A0000-0x00000000002A1000-memory.dmp

          Filesize

          4KB

        • memory/2356-25-0x0000000000270000-0x0000000000271000-memory.dmp

          Filesize

          4KB

        • memory/2356-23-0x0000000000270000-0x0000000000271000-memory.dmp

          Filesize

          4KB

        • memory/2356-18-0x0000000000260000-0x0000000000261000-memory.dmp

          Filesize

          4KB

        • memory/2356-15-0x0000000000250000-0x0000000000251000-memory.dmp

          Filesize

          4KB

        • memory/2356-10-0x0000000000240000-0x0000000000241000-memory.dmp

          Filesize

          4KB

        • memory/2356-6-0x0000000000240000-0x0000000000241000-memory.dmp

          Filesize

          4KB

        • memory/2356-5-0x0000000000230000-0x0000000000231000-memory.dmp

          Filesize

          4KB

        • memory/2356-42-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2356-40-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2356-43-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2356-45-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2356-46-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2356-50-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2356-53-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2356-63-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2356-61-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2356-65-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2356-59-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2356-68-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2356-71-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2356-57-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2356-55-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2356-73-0x0000000000400000-0x0000000001355000-memory.dmp

          Filesize

          15.3MB

        • memory/2356-77-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2356-78-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2356-48-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2356-94-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/2356-88-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB