126c6f60fc63e4f6d3bac292513c88de1eb64e69299fda0c894f12c3cf3a770b

Analysis

max time kernel
118s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24/12/2023, 17:11

Target

07ac5675d79f4b11319702aa6149349a.exe
Size

379KB
MD5

07ac5675d79f4b11319702aa6149349a
SHA1

eb83d746df19ff60a4b6632386fc1418e237ff25
SHA256

126c6f60fc63e4f6d3bac292513c88de1eb64e69299fda0c894f12c3cf3a770b
SHA512

bb9b5e4a301f06020d1475062fe061857218143db4cfea2830b63290f34abe490330ee050aa2b88572bb42eba93c61f371fa841cd7b7f443240247fc6c9c300a
SSDEEP

6144:rY70o37432B9OV6eyu7KrZNBw7FqrsWWWK91k6U4WIhzzYkRmm1fnBT7OJl3rr1/:E7/37f92yBy7cgWWtXWIxkxSfBTsphn3

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1916-0-0x0000000000400000-0x0000000000511000-memory.dmp	upx
behavioral1/memory/1916-2-0x0000000000400000-0x0000000000511000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1916	07ac5675d79f4b11319702aa6149349a.exe
1916	07ac5675d79f4b11319702aa6149349a.exe

C:\Users\Admin\AppData\Local\Temp\07ac5675d79f4b11319702aa6149349a.exe
"C:\Users\Admin\AppData\Local\Temp\07ac5675d79f4b11319702aa6149349a.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1916

memory/1916-0-0x0000000000400000-0x0000000000511000-memory.dmp

Filesize
1.1MB

Download
memory/1916-1-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/1916-2-0x0000000000400000-0x0000000000511000-memory.dmp

Filesize
1.1MB

Download