Analysis

  • max time kernel
    150s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 23:53

General

  • Target

    447d1425907bcfc3b845cdf0ead218b4.exe

  • Size

    1.9MB

  • MD5

    447d1425907bcfc3b845cdf0ead218b4

  • SHA1

    cf45aad3208f31e5e061d439c59dd87a772e9531

  • SHA256

    14b90bb1d016c5dd774ef783f7284ee5b981730092fe999ef4021ef761387640

  • SHA512

    f8dfba73fcb40d56c38901447c19d3c1d5a810f224e4f5fc956d12b717dbadd584be52b157b52d0d40b8e8550a4da2b28a5218766beee68b2049bf14b388e5b5

  • SSDEEP

    49152:fcOCdWc5Mox+cy5ZVPG0bB+plVTl0sTtIUDpesFL06mVzv9:frGWgG5ZVPGbp/IsFL06sv9

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 16 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\447d1425907bcfc3b845cdf0ead218b4.exe
    "C:\Users\Admin\AppData\Local\Temp\447d1425907bcfc3b845cdf0ead218b4.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2852

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2852-0-0x0000000000400000-0x000000000042C000-memory.dmp

    Filesize

    176KB

  • memory/2852-1-0x0000000000400000-0x000000000042C000-memory.dmp

    Filesize

    176KB

  • memory/2852-2-0x0000000000400000-0x000000000042C000-memory.dmp

    Filesize

    176KB

  • memory/2852-3-0x0000000000400000-0x000000000042C000-memory.dmp

    Filesize

    176KB

  • memory/2852-4-0x0000000000400000-0x000000000042C000-memory.dmp

    Filesize

    176KB

  • memory/2852-5-0x0000000000400000-0x000000000042C000-memory.dmp

    Filesize

    176KB

  • memory/2852-6-0x0000000000400000-0x000000000042C000-memory.dmp

    Filesize

    176KB

  • memory/2852-7-0x0000000000400000-0x000000000042C000-memory.dmp

    Filesize

    176KB

  • memory/2852-8-0x0000000000400000-0x000000000042C000-memory.dmp

    Filesize

    176KB

  • memory/2852-9-0x0000000000400000-0x000000000042C000-memory.dmp

    Filesize

    176KB

  • memory/2852-10-0x0000000000400000-0x000000000042C000-memory.dmp

    Filesize

    176KB

  • memory/2852-11-0x0000000000400000-0x000000000042C000-memory.dmp

    Filesize

    176KB

  • memory/2852-12-0x0000000000400000-0x000000000042C000-memory.dmp

    Filesize

    176KB

  • memory/2852-13-0x0000000000400000-0x000000000042C000-memory.dmp

    Filesize

    176KB

  • memory/2852-14-0x0000000000400000-0x000000000042C000-memory.dmp

    Filesize

    176KB

  • memory/2852-15-0x0000000000400000-0x000000000042C000-memory.dmp

    Filesize

    176KB