Analysis
-
max time kernel
148s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
09/01/2024, 03:06
General
-
Target
foredu.com demo software/xSpeed.net/xSpeed.net_demo.exe
-
Size
26KB
-
MD5
9dd0d77c44300ee0ff1937e5bc43bed7
-
SHA1
4646ea6f404e877abc255ee56c27f996d627298b
-
SHA256
9b9319efa5d67d39af597be1828ca3382262c99e3088a3246c798c681a1deaed
-
SHA512
79e24344a9bfb6487449b0b970e2812543370f503acc82928ca4e7dde5962c100f8505343f20cd507e0c111ebf1a035f8afe62b4461aaf124036bf049ce5245b
-
SSDEEP
384:rTe9Niq2HuT1SMpJebR4MzJbhVYSqlZXxULEwWn5eWTBVCo+bzGUpNLnKbD2Vh0z:29NQOZ/poZmPlgLjWnF0bKU7zKQ69
Score
7/10
Malware Config
Signatures
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\foredu.com demo software\xSpeed.net\xSpeed.net_demo.exe"C:\Users\Admin\AppData\Local\Temp\foredu.com demo software\xSpeed.net\xSpeed.net_demo.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
140KB
-
Filesize
68KB
-
Filesize
140KB
-
Filesize
68KB