d5d40fabc80ccae356dca6938fb913e6b0506619f6e9280cb5bcdcbd23f88a35

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
20-04-2024 03:24

Target

d5d40fabc80ccae356dca6938fb913e6b0506619f6e9280cb5bcdcbd23f88a35.exe
Size

67KB
MD5

e1d73916b72926bf990cffb5afe51ed3
SHA1

99d985bf7ae59f91e1eba623b1d32cc2ca8e636e
SHA256

d5d40fabc80ccae356dca6938fb913e6b0506619f6e9280cb5bcdcbd23f88a35
SHA512

a160e31e135fc72c257524b96d02482b4e53c6371ee57b374002788a305c97feed050aef2cedc25a1860cd20f65664056860caf633ff52163308e1baae647214
SSDEEP

1536:tHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVtWc++JbJuig:tHoLde/OgV432UcP39hXJZnWcPJFur

Score

7^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
C:\Windows\Temp\CKY3 - Bam Margera World Industries Alien Workshop Full Downloader.exe	upx
behavioral1/memory/1340-9-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral1/memory/1340-102-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

Processes:

d5d40fabc80ccae356dca6938fb913e6b0506619f6e9280cb5bcdcbd23f88a35.exe

description ioc process

File created C:\Windows\dextor32.exe d5d40fabc80ccae356dca6938fb913e6b0506619f6e9280cb5bcdcbd23f88a35.exe

description	ioc	process
File created	C:\Windows\dextor32.exe	d5d40fabc80ccae356dca6938fb913e6b0506619f6e9280cb5bcdcbd23f88a35.exe

C:\Users\Admin\AppData\Local\Temp\d5d40fabc80ccae356dca6938fb913e6b0506619f6e9280cb5bcdcbd23f88a35.exe
"C:\Users\Admin\AppData\Local\Temp\d5d40fabc80ccae356dca6938fb913e6b0506619f6e9280cb5bcdcbd23f88a35.exe"
1⤵
- Drops file in Windows directory
PID:1340

C:\Windows\Temp\CKY3 - Bam Margera World Industries Alien Workshop Full Downloader.exe
Filesize
67KB

MD5
e1d73916b72926bf990cffb5afe51ed3

SHA1
99d985bf7ae59f91e1eba623b1d32cc2ca8e636e

SHA256
d5d40fabc80ccae356dca6938fb913e6b0506619f6e9280cb5bcdcbd23f88a35

SHA512
a160e31e135fc72c257524b96d02482b4e53c6371ee57b374002788a305c97feed050aef2cedc25a1860cd20f65664056860caf633ff52163308e1baae647214

Download Submit
memory/1340-9-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/1340-102-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download