ef6b339ab3952a8095e584606b835b99ff3dd6767c306176dec0b05141c2fbf8 | Triage

Analysis

max time kernel
119s
max time network
128s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29-12-2023 19:11

Sharing

Report Analysis Logs

General

Target

015833d7f047cfb39f25b4a4c1b24e4f.exe
Size

75KB
MD5

015833d7f047cfb39f25b4a4c1b24e4f
SHA1

8034a6bd2d98c828881931ac6e23f6ee0378e226
SHA256

ef6b339ab3952a8095e584606b835b99ff3dd6767c306176dec0b05141c2fbf8
SHA512

e191c41f19c1c28cdd2220e40ee49053acccf9e712820f2d5d39dec630b7dc9e6abfeb433e03cfdc1cbf1132f1abf5c1bd9077c5544de9097f5485024e1bfb03
SSDEEP

1536:qpbTjuseLOdpIGQJClNaGMyl+xbQrIdqWeryXn:qVVQ+pIGQ+Myl+xbQrVWbn

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1972-0-0x0000000000400000-0x0000000000442000-memory.dmp	upx
behavioral1/memory/1972-3-0x0000000000400000-0x0000000000442000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1972	015833d7f047cfb39f25b4a4c1b24e4f.exe

C:\Users\Admin\AppData\Local\Temp\015833d7f047cfb39f25b4a4c1b24e4f.exe
"C:\Users\Admin\AppData\Local\Temp\015833d7f047cfb39f25b4a4c1b24e4f.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1972-0-0x0000000000400000-0x0000000000442000-memory.dmp

Filesize
264KB

Download
memory/1972-3-0x0000000000400000-0x0000000000442000-memory.dmp

Filesize
264KB

Download