dc8e495e2e1a5e6f21c27a5a10954f4f8590b1f3025ad6c0954551cf192d4928

Analysis

max time kernel
165s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
08/01/2024, 11:01

Target

4b41549dd428152ca2b09d14bdd90968.exe
Size

24KB
MD5

4b41549dd428152ca2b09d14bdd90968
SHA1

8fd9d3ee38aabefe1c3382fa3f9701569eab0fe2
SHA256

dc8e495e2e1a5e6f21c27a5a10954f4f8590b1f3025ad6c0954551cf192d4928
SHA512

bd04f37250f090903d3a4eb1fefa0ad19f2f3b8c8c4f200e9f206b5beb4cbd24f5b8f762cb75679ac569b73797f46bfbe1c7a427fc48066875ff8cdafa9ea9fe
SSDEEP

384:dggiRdq3tXrPgA5tQMoQd7fs+kc9UVHXchsXZr2xbF8yopbCcjLjeBjlGE/DPVa/:+d07PgALZ5SNc9qqsyP3DBjME/DPV4

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/2196-0-0x0000000000400000-0x000000000040E200-memory.dmp	upx
behavioral2/memory/2196-1-0x0000000000400000-0x000000000040E200-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\4b41549dd428152ca2b09d14bdd90968.exe
"C:\Users\Admin\AppData\Local\Temp\4b41549dd428152ca2b09d14bdd90968.exe"
1⤵
PID:2196

memory/2196-0-0x0000000000400000-0x000000000040E200-memory.dmp

Filesize
56KB

Download
memory/2196-1-0x0000000000400000-0x000000000040E200-memory.dmp

Filesize
56KB

Download