c4a3e4f2fc1bcb1f9e97ef3353b60aa3779683d9b9f4ac96a5588ae29e181ef1

Analysis

max time kernel
140s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
04/02/2024, 15:02 UTC

Target

8f741b11805decba2ae879eca4456265.exe
Size

366KB
MD5

8f741b11805decba2ae879eca4456265
SHA1

4a99b416ac9055d286c5152d285b530069ed3105
SHA256

c4a3e4f2fc1bcb1f9e97ef3353b60aa3779683d9b9f4ac96a5588ae29e181ef1
SHA512

aefd0806bff811590f346535917447fae2a59ec9a0f946dd686fe9b88589a04f6178d64815fac3dc7d22bc4d41e7d67d770524a07bffa9de5587b526cc1f676d
SSDEEP

6144:gt3sOy5o4i3EgtQ5Ra0K0WIxuuTSPt9ztrqU7WejOZ0xN1fWEnrYAgHm7oJQ:g2Oykpp0K03uuTSl9JQsNhW2UAG

Score

8^/10

upx

Drops file in Drivers directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\system32\drivers\etc\hosts	8f741b11805decba2ae879eca4456265.exe

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1384-0-0x0000000000400000-0x00000000005A8000-memory.dmp	upx
behavioral1/memory/1384-3-0x0000000000400000-0x00000000005A8000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\8f741b11805decba2ae879eca4456265.exe
"C:\Users\Admin\AppData\Local\Temp\8f741b11805decba2ae879eca4456265.exe"
1⤵
- Drops file in Drivers directory
PID:1384

memory/1384-2-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download
memory/1384-0-0x0000000000400000-0x00000000005A8000-memory.dmp

Filesize
1.7MB

Download
memory/1384-3-0x0000000000400000-0x00000000005A8000-memory.dmp

Filesize
1.7MB

Download