1eaec2ad7586fe801d6b23d330557755178f9f6c811890d08ba37c83990730c7 | Triage

Analysis

max time kernel
153s
max time network
164s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30-12-2023 06:58

Sharing

Report Analysis Logs

General

Target

119992cfed1fc75742b2c4fab9ddb92c.exe
Size

58KB
MD5

119992cfed1fc75742b2c4fab9ddb92c
SHA1

7d68d3b7f1829019c5076f71429c7bd9add02f5b
SHA256

1eaec2ad7586fe801d6b23d330557755178f9f6c811890d08ba37c83990730c7
SHA512

e5035dde7569a8006152313fbc2cbd51c59bda551d805456a1b2fbb038cbfbe5c0dca12678feccfa067cd1bde7e862944a9b569a8d559f427037a3414695a52d
SSDEEP

1536:zhivqRTLZQVO/BYsIXk3usOV+tpqvz4ysdRet:dkie6B4YdOUtsps/C

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4564-0-0x0000000000400000-0x0000000000423000-memory.dmp	upx
behavioral2/memory/4564-1-0x0000000000400000-0x0000000000423000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4564	119992cfed1fc75742b2c4fab9ddb92c.exe
4564	119992cfed1fc75742b2c4fab9ddb92c.exe

C:\Users\Admin\AppData\Local\Temp\119992cfed1fc75742b2c4fab9ddb92c.exe
"C:\Users\Admin\AppData\Local\Temp\119992cfed1fc75742b2c4fab9ddb92c.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4564

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4564-0-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/4564-1-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download