Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
31/12/2023, 13:12
General
-
Target
37726dcb30279040139f10d32e16d6a5.exe
-
Size
68KB
-
MD5
37726dcb30279040139f10d32e16d6a5
-
SHA1
3b3203faa8170f8d937e7c33fff7c14c066d77e4
-
SHA256
9d781b9fe8a71b06ca841882cb795d425c305a985fde9b443b6698a57c953e4b
-
SHA512
e298292ad1cbfd44eb1bcc093953cb18bf37a9de11bfc2a715e60162518b1f666285cbe1d967837de2ba9272641b3c94c0ea5a7ce2c3f21209b22bfc53843b21
-
SSDEEP
768:lX7U0rm/hIVym94fLiU+fc8ZcnrxWgnwFTLxuhH9Hg5+4MaMc3:pYs6Ilsixbq1Jn4Lg5dgN
Score
7/10
Malware Config
Signatures
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of SetThreadContext 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\37726dcb30279040139f10d32e16d6a5.exe"C:\Users\Admin\AppData\Local\Temp\37726dcb30279040139f10d32e16d6a5.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\svchost.exesvchost.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
72KB
-
Filesize
72KB
-
Filesize
72KB
-
Filesize
72KB