e2b39c4e384688ce8cc804eb468ae2829c814b2145f7fa1fc8f313233bd2cadd

Analysis

max time kernel
2s
max time network
30s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 03:13

Target

4f535ed5f81acb6563ece83b76555333.exe
Size

373KB
MD5

4f535ed5f81acb6563ece83b76555333
SHA1

3491e33820e1f856b4d12ed0f9b4167d2df15432
SHA256

e2b39c4e384688ce8cc804eb468ae2829c814b2145f7fa1fc8f313233bd2cadd
SHA512

ed879a81e7f3d95fa5469b02f14c37e7decae55807796de82a5e183a213340b738826a6c5005f63653912d9dddb314c33fe4d924a479adf6eac58f7a9067aa9c
SSDEEP

6144:O71s7MqrWsve48edpIynD5bZ1XmmV9jwQ1E++yDqDCphnF1cACTfgjdBi:zWi8eQeZ1XmM9j519DXF1kfgjdBi

Score

7^/10

upx

Deletes itself 1 IoCs

pid	Process
2808	cmd.exe

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2456-0-0x0000000000400000-0x00000000004E2000-memory.dmp	upx
behavioral1/memory/2456-9-0x0000000000400000-0x00000000004E2000-memory.dmp	upx

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2456 wrote to memory of 2808	2456	4f535ed5f81acb6563ece83b76555333.exe	17
PID 2456 wrote to memory of 2808	2456	4f535ed5f81acb6563ece83b76555333.exe	17
PID 2456 wrote to memory of 2808	2456	4f535ed5f81acb6563ece83b76555333.exe	17
PID 2456 wrote to memory of 2808	2456	4f535ed5f81acb6563ece83b76555333.exe	17

C:\Windows\SysWOW64\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\4f535ed5f81acb6563ece83b76555333.bat
1⤵
- Deletes itself
PID:2808

C:\Users\Admin\AppData\Local\Temp\4f535ed5f81acb6563ece83b76555333.exe
"C:\Users\Admin\AppData\Local\Temp\4f535ed5f81acb6563ece83b76555333.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2456

memory/2456-0-0x0000000000400000-0x00000000004E2000-memory.dmp

Filesize
904KB

Download
memory/2456-9-0x0000000000400000-0x00000000004E2000-memory.dmp

Filesize
904KB

Download
memory/2456-1-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download