Analysis

  • max time kernel
    66s
  • max time network
    50s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-04-2024 22:15

General

  • Target

    fb5674b73f0f16d23df2a5e4dba4edd24cf7d517096c3cb3c085f540ef5b89e3.exe

  • Size

    2.5MB

  • MD5

    56a7814e5c853ca955ee211dcf45a507

  • SHA1

    64f4c22989863a707af94096b1b256085deb8a0b

  • SHA256

    fb5674b73f0f16d23df2a5e4dba4edd24cf7d517096c3cb3c085f540ef5b89e3

  • SHA512

    7b49d995bc833f9690487246324df8f72f2b207a245d8197ced8e5d15009d2ffda801011d2be904e4e881daa96dff055863af3489648dc1828710aae9950cef0

  • SSDEEP

    49152:FRUHPlvJGD8zKaKNVbt5Xraf9dXBROFqA1bl:cPzGmyNVbtVraf9dxROFqsbl

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fb5674b73f0f16d23df2a5e4dba4edd24cf7d517096c3cb3c085f540ef5b89e3.exe
    "C:\Users\Admin\AppData\Local\Temp\fb5674b73f0f16d23df2a5e4dba4edd24cf7d517096c3cb3c085f540ef5b89e3.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:3056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3056-9-0x0000000000400000-0x0000000000F83000-memory.dmp
    Filesize

    11.5MB

  • memory/3056-19-0x0000000000400000-0x0000000000F83000-memory.dmp
    Filesize

    11.5MB