7cebc1c0bf55b3eb5bfcad258f939723e56bd83dbdbb136db91176eb1d1c2ef5

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10/03/2024, 03:26

Target

bd8b9dbdabea988ea38144bc74f91326.exe
Size

197KB
MD5

bd8b9dbdabea988ea38144bc74f91326
SHA1

93bb9cf9fb87ba938dc94904aacb37e26ffa0c46
SHA256

7cebc1c0bf55b3eb5bfcad258f939723e56bd83dbdbb136db91176eb1d1c2ef5
SHA512

7a5d779919b57bce9461dd0581e7607bf31c9ddfc60f4a93ca8cae45a9ee2f7b39db40758b5111352e7c0f6b5c6803e41f1c659317c40b16417006d6b0f1e865
SSDEEP

6144:4pMyDMySgoQKRLwIT5TKAT9hAeMD/3wAd:YMyYgYlwIZKATzMD/31

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1736-0-0x0000000000400000-0x00000000004CA000-memory.dmp	upx
behavioral1/memory/1736-5-0x0000000000400000-0x00000000004CA000-memory.dmp	upx

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1736 set thread context of 2204	1736	bd8b9dbdabea988ea38144bc74f91326.exe	28

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2204	bd8b9dbdabea988ea38144bc74f91326.exe
2204	bd8b9dbdabea988ea38144bc74f91326.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1736	bd8b9dbdabea988ea38144bc74f91326.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 1736 wrote to memory of 2204	1736	bd8b9dbdabea988ea38144bc74f91326.exe	28
PID 1736 wrote to memory of 2204	1736	bd8b9dbdabea988ea38144bc74f91326.exe	28
PID 1736 wrote to memory of 2204	1736	bd8b9dbdabea988ea38144bc74f91326.exe	28
PID 1736 wrote to memory of 2204	1736	bd8b9dbdabea988ea38144bc74f91326.exe	28
PID 1736 wrote to memory of 2204	1736	bd8b9dbdabea988ea38144bc74f91326.exe	28
PID 1736 wrote to memory of 2204	1736	bd8b9dbdabea988ea38144bc74f91326.exe	28
PID 1736 wrote to memory of 2204	1736	bd8b9dbdabea988ea38144bc74f91326.exe	28
PID 1736 wrote to memory of 2204	1736	bd8b9dbdabea988ea38144bc74f91326.exe	28
PID 2204 wrote to memory of 1224	2204	bd8b9dbdabea988ea38144bc74f91326.exe	21
PID 2204 wrote to memory of 1224	2204	bd8b9dbdabea988ea38144bc74f91326.exe	21
PID 2204 wrote to memory of 1224	2204	bd8b9dbdabea988ea38144bc74f91326.exe	21
PID 2204 wrote to memory of 1224	2204	bd8b9dbdabea988ea38144bc74f91326.exe	21

memory/1224-9-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1224-13-0x000000007EFD0000-0x000000007EFD1000-memory.dmp

Filesize
4KB

Download
memory/1736-0-0x0000000000400000-0x00000000004CA000-memory.dmp

Filesize
808KB

Download
memory/1736-5-0x0000000000400000-0x00000000004CA000-memory.dmp

Filesize
808KB

Download
memory/2204-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2204-6-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/2204-7-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2204-8-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2204-10-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/2204-23-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/2204-24-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download