b50a9e7147e699a21dbace7d271a64a009d7bee42ec068947d185b2e8cb0583d

Analysis

max time kernel
149s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
01/02/2024, 19:31

Target

87b6d51fe0c4f1dc49be05ad072c004f.exe
Size

208KB
MD5

87b6d51fe0c4f1dc49be05ad072c004f
SHA1

9d3134ca7b86a05e678129a73f48e03722353137
SHA256

b50a9e7147e699a21dbace7d271a64a009d7bee42ec068947d185b2e8cb0583d
SHA512

568e8ab115d9979bd9305dfe73b7824dc1909302849b70243fc34ea1b227d0f374f5ae4e1a12adaa70228673e88916a4f2c2b4789e4aeea80e90910c5262e5c9
SSDEEP

3072:w9tZHu1b/+k3jv5e8navb5OWzq7ZiWi3tR0ZujlhOhKIuL6XxFz9Lv7pEJ/dUTtl:WTqHkvb5OWWQdaZ4hKp7z9LTunWrB

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/3788-0-0x0000000000400000-0x0000000000453000-memory.dmp	upx

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
3788	87b6d51fe0c4f1dc49be05ad072c004f.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 3788 wrote to memory of 4548	3788	87b6d51fe0c4f1dc49be05ad072c004f.exe	86
PID 3788 wrote to memory of 4548	3788	87b6d51fe0c4f1dc49be05ad072c004f.exe	86
PID 3788 wrote to memory of 4548	3788	87b6d51fe0c4f1dc49be05ad072c004f.exe	86
PID 3788 wrote to memory of 4548	3788	87b6d51fe0c4f1dc49be05ad072c004f.exe	86
PID 3788 wrote to memory of 4548	3788	87b6d51fe0c4f1dc49be05ad072c004f.exe	86
PID 3788 wrote to memory of 4548	3788	87b6d51fe0c4f1dc49be05ad072c004f.exe	86

memory/3788-0-0x0000000000400000-0x0000000000453000-memory.dmp

Filesize
332KB

Download
memory/3788-1-0x0000000000460000-0x0000000000462000-memory.dmp

Filesize
8KB

Download
memory/3788-2-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/3788-3-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/4548-4-0x0000000000E60000-0x0000000000E6E000-memory.dmp

Filesize
56KB

Download
memory/4548-5-0x00000000005C0000-0x00000000005C9000-memory.dmp

Filesize
36KB

Download
memory/4548-8-0x00000000005C0000-0x00000000005C9000-memory.dmp

Filesize
36KB

Download