5f3139d324032d195473235086a80a3d38ffb67e9e79cdc4950fa80c2d617c13

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 04:08

Target

0debfb37b4bc6fcedead4af1f43123c0.exe
Size

260KB
MD5

0debfb37b4bc6fcedead4af1f43123c0
SHA1

5b7ae4252496c5c73b6598f09fc5c43c0384bb2d
SHA256

5f3139d324032d195473235086a80a3d38ffb67e9e79cdc4950fa80c2d617c13
SHA512

6fa7e7f2c93a4be319b0c5cc1b1640271054bf327ecabb7a86329f64a839571867988d36c360c6df2053e2af37c2af88ffa893cf684d271f19d2ba90dd7aa6c5
SSDEEP

6144:/hVGuKelBHusJzOEGduzhpxbYQ97SYlH9mIXnn:/hVG4R9sKlY6hn

Score

7^/10

upx

UPX packed file 4 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2664-4-0x0000000000400000-0x0000000000427000-memory.dmp	upx
behavioral1/memory/2664-6-0x0000000000400000-0x0000000000427000-memory.dmp	upx
behavioral1/memory/2664-9-0x0000000000400000-0x0000000000427000-memory.dmp	upx
behavioral1/memory/2664-17-0x0000000000400000-0x0000000000427000-memory.dmp	upx

Suspicious use of SetThreadContext 2 IoCs

description	pid	Process	procid_target
PID 2848 set thread context of 2664	2848	0debfb37b4bc6fcedead4af1f43123c0.exe	28
PID 2664 set thread context of 2700	2664	0debfb37b4bc6fcedead4af1f43123c0.exe	29

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2848	0debfb37b4bc6fcedead4af1f43123c0.exe
2664	0debfb37b4bc6fcedead4af1f43123c0.exe

Suspicious use of WriteProcessMemory 17 IoCs

description	pid	Process	procid_target
PID 2848 wrote to memory of 2664	2848	0debfb37b4bc6fcedead4af1f43123c0.exe	28
PID 2848 wrote to memory of 2664	2848	0debfb37b4bc6fcedead4af1f43123c0.exe	28
PID 2848 wrote to memory of 2664	2848	0debfb37b4bc6fcedead4af1f43123c0.exe	28
PID 2848 wrote to memory of 2664	2848	0debfb37b4bc6fcedead4af1f43123c0.exe	28
PID 2848 wrote to memory of 2664	2848	0debfb37b4bc6fcedead4af1f43123c0.exe	28
PID 2848 wrote to memory of 2664	2848	0debfb37b4bc6fcedead4af1f43123c0.exe	28
PID 2848 wrote to memory of 2664	2848	0debfb37b4bc6fcedead4af1f43123c0.exe	28
PID 2848 wrote to memory of 2664	2848	0debfb37b4bc6fcedead4af1f43123c0.exe	28
PID 2848 wrote to memory of 2664	2848	0debfb37b4bc6fcedead4af1f43123c0.exe	28
PID 2664 wrote to memory of 2700	2664	0debfb37b4bc6fcedead4af1f43123c0.exe	29
PID 2664 wrote to memory of 2700	2664	0debfb37b4bc6fcedead4af1f43123c0.exe	29
PID 2664 wrote to memory of 2700	2664	0debfb37b4bc6fcedead4af1f43123c0.exe	29
PID 2664 wrote to memory of 2700	2664	0debfb37b4bc6fcedead4af1f43123c0.exe	29
PID 2664 wrote to memory of 2700	2664	0debfb37b4bc6fcedead4af1f43123c0.exe	29
PID 2664 wrote to memory of 2700	2664	0debfb37b4bc6fcedead4af1f43123c0.exe	29
PID 2664 wrote to memory of 2700	2664	0debfb37b4bc6fcedead4af1f43123c0.exe	29
PID 2664 wrote to memory of 2700	2664	0debfb37b4bc6fcedead4af1f43123c0.exe	29

memory/2664-9-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download
memory/2664-17-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download
memory/2664-4-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download
memory/2664-6-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download
memory/2700-12-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2700-15-0x0000000000400000-0x00000000004083A0-memory.dmp

Filesize
32KB

Download
memory/2700-16-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2700-18-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2700-20-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download
memory/2700-21-0x0000000000400000-0x00000000004083A0-memory.dmp

Filesize
32KB

Download
memory/2848-7-0x0000000000400000-0x0000000000519000-memory.dmp

Filesize
1.1MB

Download
memory/2848-0-0x0000000000400000-0x0000000000519000-memory.dmp

Filesize
1.1MB

Download
memory/2848-1-0x0000000000400000-0x0000000000519000-memory.dmp

Filesize
1.1MB

Download