Analysis

  • max time kernel
    142s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    10/01/2024, 02:54

General

  • Target

    keygen.exe

  • Size

    73KB

  • MD5

    3d74cfb293a6e20e00540e9f032d0c63

  • SHA1

    9e3624911c97e9bee6b16cea9bff0739dcd3f3a3

  • SHA256

    b10d97488bea300be1dfbc5ecd8b349a0daa5a3730daa5a139c2fabfd30cd682

  • SHA512

    494c556b87df0a291822b341091784397794bedfbe66ec8fbfffb2135155222e5b134bb12a0d27e656b8b5d4a8dc40b4d6d50600e3b083f858346789df8bab25

  • SSDEEP

    1536:wcLBr5zd+wSONF56pLy9j6LIDTMyiak7hIJYUY+BG6vS4nEZf:wqPzd+wt8pLgOiijlZIbvS4Y

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 16 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\keygen.exe
    "C:\Users\Admin\AppData\Local\Temp\keygen.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:1628

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1628-0-0x0000000000400000-0x0000000000499000-memory.dmp

          Filesize

          612KB

        • memory/1628-1-0x0000000000400000-0x0000000000499000-memory.dmp

          Filesize

          612KB

        • memory/1628-2-0x0000000000400000-0x0000000000499000-memory.dmp

          Filesize

          612KB

        • memory/1628-3-0x0000000000400000-0x0000000000499000-memory.dmp

          Filesize

          612KB

        • memory/1628-4-0x0000000000400000-0x0000000000499000-memory.dmp

          Filesize

          612KB

        • memory/1628-5-0x0000000000400000-0x0000000000499000-memory.dmp

          Filesize

          612KB

        • memory/1628-6-0x0000000000400000-0x0000000000499000-memory.dmp

          Filesize

          612KB

        • memory/1628-7-0x0000000000400000-0x0000000000499000-memory.dmp

          Filesize

          612KB

        • memory/1628-8-0x0000000000400000-0x0000000000499000-memory.dmp

          Filesize

          612KB

        • memory/1628-9-0x0000000000400000-0x0000000000499000-memory.dmp

          Filesize

          612KB

        • memory/1628-10-0x0000000000400000-0x0000000000499000-memory.dmp

          Filesize

          612KB

        • memory/1628-11-0x0000000000400000-0x0000000000499000-memory.dmp

          Filesize

          612KB

        • memory/1628-12-0x0000000000400000-0x0000000000499000-memory.dmp

          Filesize

          612KB

        • memory/1628-13-0x0000000000400000-0x0000000000499000-memory.dmp

          Filesize

          612KB

        • memory/1628-14-0x0000000000400000-0x0000000000499000-memory.dmp

          Filesize

          612KB

        • memory/1628-15-0x0000000000400000-0x0000000000499000-memory.dmp

          Filesize

          612KB