Analysis

  • max time kernel
    144s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-12-2023 13:53

General

  • Target

    235ee480a2b8855fb0b4c4b3b53a27c7.exe

  • Size

    2.0MB

  • MD5

    235ee480a2b8855fb0b4c4b3b53a27c7

  • SHA1

    d5ab6c133d1a49648106997246104ea78484d828

  • SHA256

    2194b19e7f0ceff2a2081a411372ebad7cd5f123475927a7f6507f807ab11d2d

  • SHA512

    dbfe5cf45d7a450b6ee56028419f66ce0d9e8c675a35ec1e73fccbd06dd5f7cb488ef3ce2dad7cfa2e7186ae1c61e7cc6b75482c3ecad450519d060699dde242

  • SSDEEP

    49152:rTKUz1WPymSGXEfrOW4LV/yJr/I25EWsGYPfxvSXosPJoJBtKK:XKSsPyfnfrj4LAw25EWqpaXOJP

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\235ee480a2b8855fb0b4c4b3b53a27c7.exe
    "C:\Users\Admin\AppData\Local\Temp\235ee480a2b8855fb0b4c4b3b53a27c7.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    PID:1416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1416-1-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/1416-0-0x0000000000400000-0x00000000009D2000-memory.dmp

    Filesize

    5.8MB

  • memory/1416-2-0x0000000003A40000-0x0000000003A41000-memory.dmp

    Filesize

    4KB

  • memory/1416-3-0x0000000000400000-0x00000000009D2000-memory.dmp

    Filesize

    5.8MB

  • memory/1416-5-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/1416-6-0x0000000003A40000-0x0000000003A41000-memory.dmp

    Filesize

    4KB