1bdae352343743ce740f6fc4a838ca4d2a7977f0d74ea997717638a3fb3d62b5 | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26-12-2023 05:04

Sharing

Report Analysis Logs

General

Target

568029eb362f98998ab75a73d01f938e.exe
Size

96KB
MD5

568029eb362f98998ab75a73d01f938e
SHA1

e03db0b2dec19e5f16e65c259c440349592bf2de
SHA256

1bdae352343743ce740f6fc4a838ca4d2a7977f0d74ea997717638a3fb3d62b5
SHA512

d4d9c25d02d75f23924c05d05781ed3b759ea8965f97a6a071cb004e3854dbd400299dec12fa56806ca174fbe45e2005cfc0eaae158b8faf86ca1f2413cc99a1
SSDEEP

3072:6HoTf6yORA/cTvfPv7WzJq/+gPBqm6wgZ:6IbO6EbPkJi+gpJW

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1700-0-0x0000000000400000-0x000000000040B000-memory.dmp	upx
behavioral1/memory/1700-3-0x0000000000400000-0x000000000040B000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1700	568029eb362f98998ab75a73d01f938e.exe

C:\Users\Admin\AppData\Local\Temp\568029eb362f98998ab75a73d01f938e.exe
"C:\Users\Admin\AppData\Local\Temp\568029eb362f98998ab75a73d01f938e.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1700-0-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1700-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download