6a2e1e6c8bbe53f0df0dc6fca22cdaa6e30188df3de9907d1da12e05b3655d5d

General

Target

[]ɳ˲.exe
Size

1.0MB
MD5

a2b637734f816170bdd7ab812babbcac
SHA1

2ae48c0b3ca0cea4746c4eb60298f07b90cdd2f0
SHA256

80d19992fa6b67f5ffe50c166a5f2e98a4c76e12f2076ab39da21dea7a8c1283
SHA512

766e13f75c80f81e0da52869659e3909dc89fa13744ee7fca5d7969d20d721725cf8802705d30010ea30c0f3bf76dea6cfe693aa6457156358c742a7a20b586a
SSDEEP

24576:KIwJ1jtFvqKzvQi13VNx+MZNeCyAwH1T5iwaLUAyFFJNSeBO:HwJ1rpjNx+MZgCyAwOwaAAeFeWO

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 24 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/4136-1-0x0000000010000000-0x000000001003F000-memory.dmp	upx
behavioral2/memory/4136-2-0x0000000010000000-0x000000001003F000-memory.dmp	upx
behavioral2/memory/4136-4-0x0000000010000000-0x000000001003F000-memory.dmp	upx
behavioral2/memory/4136-6-0x0000000010000000-0x000000001003F000-memory.dmp	upx
behavioral2/memory/4136-8-0x0000000010000000-0x000000001003F000-memory.dmp	upx
behavioral2/memory/4136-11-0x0000000010000000-0x000000001003F000-memory.dmp	upx
behavioral2/memory/4136-13-0x0000000010000000-0x000000001003F000-memory.dmp	upx
behavioral2/memory/4136-16-0x0000000010000000-0x000000001003F000-memory.dmp	upx
behavioral2/memory/4136-18-0x0000000010000000-0x000000001003F000-memory.dmp	upx
behavioral2/memory/4136-20-0x0000000010000000-0x000000001003F000-memory.dmp	upx
behavioral2/memory/4136-23-0x0000000010000000-0x000000001003F000-memory.dmp	upx
behavioral2/memory/4136-25-0x0000000010000000-0x000000001003F000-memory.dmp	upx
behavioral2/memory/4136-28-0x0000000010000000-0x000000001003F000-memory.dmp	upx
behavioral2/memory/4136-30-0x0000000010000000-0x000000001003F000-memory.dmp	upx
behavioral2/memory/4136-32-0x0000000010000000-0x000000001003F000-memory.dmp	upx
behavioral2/memory/4136-36-0x0000000010000000-0x000000001003F000-memory.dmp	upx
behavioral2/memory/4136-38-0x0000000010000000-0x000000001003F000-memory.dmp	upx
behavioral2/memory/4136-41-0x0000000010000000-0x000000001003F000-memory.dmp	upx
behavioral2/memory/4136-43-0x0000000010000000-0x000000001003F000-memory.dmp	upx
behavioral2/memory/4136-45-0x0000000010000000-0x000000001003F000-memory.dmp	upx
behavioral2/memory/4136-50-0x0000000010000000-0x000000001003F000-memory.dmp	upx
behavioral2/memory/4136-48-0x0000000010000000-0x000000001003F000-memory.dmp	upx
behavioral2/memory/4136-53-0x0000000010000000-0x000000001003F000-memory.dmp	upx
behavioral2/memory/4136-55-0x0000000010000000-0x000000001003F000-memory.dmp	upx

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
4136	[]ɳ˲.exe
4136	[]ɳ˲.exe
4136	[]ɳ˲.exe
4136	[]ɳ˲.exe
4136	[]ɳ˲.exe
4136	[]ɳ˲.exe
4136	[]ɳ˲.exe
4136	[]ɳ˲.exe
4136	[]ɳ˲.exe
4136	[]ɳ˲.exe
4136	[]ɳ˲.exe
4136	[]ɳ˲.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
4136	[]ɳ˲.exe
4136	[]ɳ˲.exe
4136	[]ɳ˲.exe

C:\Users\Admin\AppData\Local\Temp\[]ɳ˲.exe
"C:\Users\Admin\AppData\Local\Temp\[]ɳ˲.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4136

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4136-0-0x0000000000400000-0x0000000000583200-memory.dmp

Filesize
1.5MB

Download
memory/4136-1-0x0000000010000000-0x000000001003F000-memory.dmp

Filesize
252KB

Download
memory/4136-2-0x0000000010000000-0x000000001003F000-memory.dmp

Filesize
252KB

Download
memory/4136-4-0x0000000010000000-0x000000001003F000-memory.dmp

Filesize
252KB

Download
memory/4136-6-0x0000000010000000-0x000000001003F000-memory.dmp

Filesize
252KB

Download
memory/4136-8-0x0000000010000000-0x000000001003F000-memory.dmp

Filesize
252KB

Download
memory/4136-11-0x0000000010000000-0x000000001003F000-memory.dmp

Filesize
252KB

Download
memory/4136-13-0x0000000010000000-0x000000001003F000-memory.dmp

Filesize
252KB

Download
memory/4136-16-0x0000000010000000-0x000000001003F000-memory.dmp

Filesize
252KB

Download
memory/4136-18-0x0000000010000000-0x000000001003F000-memory.dmp

Filesize
252KB

Download
memory/4136-20-0x0000000010000000-0x000000001003F000-memory.dmp

Filesize
252KB

Download
memory/4136-23-0x0000000010000000-0x000000001003F000-memory.dmp

Filesize
252KB

Download
memory/4136-25-0x0000000010000000-0x000000001003F000-memory.dmp

Filesize
252KB

Download
memory/4136-28-0x0000000010000000-0x000000001003F000-memory.dmp

Filesize
252KB

Download
memory/4136-30-0x0000000010000000-0x000000001003F000-memory.dmp

Filesize
252KB

Download
memory/4136-33-0x0000000000400000-0x0000000000583200-memory.dmp

Filesize
1.5MB

Download
memory/4136-32-0x0000000010000000-0x000000001003F000-memory.dmp

Filesize
252KB

Download
memory/4136-36-0x0000000010000000-0x000000001003F000-memory.dmp

Filesize
252KB

Download
memory/4136-38-0x0000000010000000-0x000000001003F000-memory.dmp

Filesize
252KB

Download
memory/4136-41-0x0000000010000000-0x000000001003F000-memory.dmp

Filesize
252KB

Download
memory/4136-43-0x0000000010000000-0x000000001003F000-memory.dmp

Filesize
252KB

Download
memory/4136-45-0x0000000010000000-0x000000001003F000-memory.dmp

Filesize
252KB

Download
memory/4136-50-0x0000000010000000-0x000000001003F000-memory.dmp

Filesize
252KB

Download
memory/4136-48-0x0000000010000000-0x000000001003F000-memory.dmp

Filesize
252KB

Download
memory/4136-53-0x0000000010000000-0x000000001003F000-memory.dmp

Filesize
252KB

Download
memory/4136-54-0x0000000000400000-0x0000000000583200-memory.dmp

Filesize
1.5MB

Download
memory/4136-55-0x0000000010000000-0x000000001003F000-memory.dmp

Filesize
252KB

Download

Analysis

Sharing