b1edb7d15270a947ac57898512d8f5c90d7d29c710ee6883ee4993e106d39fe9

Analysis

max time kernel
145s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
14-03-2024 16:06

Target

c909c0aade2b139fc7be23733c83dcbf.exe
Size

1.2MB
MD5

c909c0aade2b139fc7be23733c83dcbf
SHA1

8b4b60cfdf627229ee06fb01629061a888a86e91
SHA256

b1edb7d15270a947ac57898512d8f5c90d7d29c710ee6883ee4993e106d39fe9
SHA512

c073f0fd53256b112b86fc98ca063b775699dd3d5c4edd2ecf54214e0154b571f01d03f341d8e2774e85caf29066ed4f20447f9d25dff1e5a39b548dff07821c
SSDEEP

24576:DlARQXoI00k36anSFFNYT0ngETlC7XqTiY4XvZbWtE0W1FHSL2Vjif:DlqQXoI0J3BsPa0nPTY2Tb4Xhbl0W1En

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/2876-0-0x0000000000400000-0x0000000000426000-memory.dmp	upx
behavioral2/memory/2876-1-0x0000000000400000-0x0000000000426000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2876	c909c0aade2b139fc7be23733c83dcbf.exe
2876	c909c0aade2b139fc7be23733c83dcbf.exe

C:\Users\Admin\AppData\Local\Temp\c909c0aade2b139fc7be23733c83dcbf.exe
"C:\Users\Admin\AppData\Local\Temp\c909c0aade2b139fc7be23733c83dcbf.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2876

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4068 --field-trial-handle=2256,i,6670388345726423024,18382795228658886258,262144 --variations-seed-version /prefetch:8
1⤵
PID:1220

memory/2876-0-0x0000000000400000-0x0000000000426000-memory.dmp

Filesize
152KB

Download
memory/2876-1-0x0000000000400000-0x0000000000426000-memory.dmp

Filesize
152KB

Download