bfcd2785ed6171a981de01aa50c32cb189edc8bb33b4243e2e010b66e34ab77d | Triage

Analysis

max time kernel
141s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 20:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

03af8f84b6adda08ab1cc3f7662c753f.exe
Size

48KB
MD5

03af8f84b6adda08ab1cc3f7662c753f
SHA1

489c1382378100d83e9a2a5666cb47e760938f79
SHA256

bfcd2785ed6171a981de01aa50c32cb189edc8bb33b4243e2e010b66e34ab77d
SHA512

0ee8f32e702d6975b02b16c9143a78f8b517af2a9777fb36d700224ddca2bfc24b5c4cfd0f54857d0cd63c86260d2a758bb10fa79f41be0740f6dc9d36a00fde
SSDEEP

1536:5FCtsuWg+t/YIm84Gb93KBYPhs8nuTjIBn:Cz+trp6BYVuYB

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2168-0-0x0000000000400000-0x000000000142B000-memory.dmp	upx
behavioral1/memory/2168-1-0x0000000000400000-0x000000000142B000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2168	03af8f84b6adda08ab1cc3f7662c753f.exe
2168	03af8f84b6adda08ab1cc3f7662c753f.exe

C:\Users\Admin\AppData\Local\Temp\03af8f84b6adda08ab1cc3f7662c753f.exe
"C:\Users\Admin\AppData\Local\Temp\03af8f84b6adda08ab1cc3f7662c753f.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2168

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2168-0-0x0000000000400000-0x000000000142B000-memory.dmp

Filesize
16.2MB

Download
memory/2168-1-0x0000000000400000-0x000000000142B000-memory.dmp

Filesize
16.2MB

Download