Analysis

  • max time kernel
    147s
  • max time network
    161s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-01-2024 12:58

General

  • Target

    gsrhs_romeditor.exe

  • Size

    94KB

  • MD5

    90daeaba98fc04b2d79aa0a019b1c508

  • SHA1

    96e6578a9b0ac6ccb8a95e607bee47e2ba619ae0

  • SHA256

    ff34d94acd69f0d3e4654f1d63cb4f38f1b3e9813d699db15a06f7264ca91bbe

  • SHA512

    d2d27f320610c961253fdffc2f02b3095e8d429641ba5310ec9ab0922c7277760a18d5c780bec1b59e79bedeac3f4955f8f84eae679e4079c3b1317e01afde05

  • SSDEEP

    1536:mjLCu3qXu65+MDUY8m0bNUn6Bc4Q7Ti9W5CtfKz93Ej7OqoBduXLs7/x:5fu65BUw0bNG6NsOntfc90uqoKLs/x

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\gsrhs_romeditor.exe
    "C:\Users\Admin\AppData\Local\Temp\gsrhs_romeditor.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4660-0-0x0000000000400000-0x0000000000453000-memory.dmp

    Filesize

    332KB

  • memory/4660-2-0x0000000000400000-0x0000000000453000-memory.dmp

    Filesize

    332KB

  • memory/4660-4-0x0000000000400000-0x0000000000453000-memory.dmp

    Filesize

    332KB

  • memory/4660-5-0x0000000000400000-0x0000000000453000-memory.dmp

    Filesize

    332KB