b3abbf0cbe9dcbb0b2150f254ab1d4fc2ba252a486aca68402aa54fa8ba4ac79

Analysis

max time kernel
146s
max time network
163s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
10/01/2024, 16:42

Target

b3abbf0cbe9dcbb0b2150f254ab1d4fc2ba252a486aca68402aa54fa8ba4ac79.exe
Size

1.4MB
MD5

57bf8326dddc51fb9a3ae950de733a8e
SHA1

2f334c715dd36d7c4b1017d253ea02e6da40dc0a
SHA256

b3abbf0cbe9dcbb0b2150f254ab1d4fc2ba252a486aca68402aa54fa8ba4ac79
SHA512

192243894e92c276a175e89e941a8e8eb0580f3d9fbf90af8c17715f9133be07bc7829927eea29f7e293363e9a7e1bc59e93089534c89b6f5cddc538e6bb5b4d
SSDEEP

24576:VMB3rH3sC2GMwjto3LM6Pz0//+T/3auV9TuTXA7DJlG4dpms7Zz:VUzXpMgoh0/GLKum7AjCs7p

Score

7^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4752-0-0x0000000000460000-0x00000000008AA000-memory.dmp	upx
behavioral2/memory/4752-4-0x0000000000460000-0x00000000008AA000-memory.dmp	upx
behavioral2/memory/4752-10-0x0000000000460000-0x00000000008AA000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
4752	b3abbf0cbe9dcbb0b2150f254ab1d4fc2ba252a486aca68402aa54fa8ba4ac79.exe
4752	b3abbf0cbe9dcbb0b2150f254ab1d4fc2ba252a486aca68402aa54fa8ba4ac79.exe
4752	b3abbf0cbe9dcbb0b2150f254ab1d4fc2ba252a486aca68402aa54fa8ba4ac79.exe
4752	b3abbf0cbe9dcbb0b2150f254ab1d4fc2ba252a486aca68402aa54fa8ba4ac79.exe

C:\Users\Admin\AppData\Local\Temp\b3abbf0cbe9dcbb0b2150f254ab1d4fc2ba252a486aca68402aa54fa8ba4ac79.exe
"C:\Users\Admin\AppData\Local\Temp\b3abbf0cbe9dcbb0b2150f254ab1d4fc2ba252a486aca68402aa54fa8ba4ac79.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4752

memory/4752-0-0x0000000000460000-0x00000000008AA000-memory.dmp

Filesize
4.3MB

Download
memory/4752-4-0x0000000000460000-0x00000000008AA000-memory.dmp

Filesize
4.3MB

Download
memory/4752-10-0x0000000000460000-0x00000000008AA000-memory.dmp

Filesize
4.3MB

Download