e6564b70fa3d9a9e989ad7c1bb2b027f2e5447273c0bb64f84c7940828ecb0ed

Analysis

max time kernel
124s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
10-05-2024 13:18

Target

68ca177d42ab79022ede5d703f2f3b4e3de42fc1ae56a531b50f66f3339721f8.exe
Size

2.6MB
MD5

2f7129366c456459ebadc1dd90c439f2
SHA1

9ea7a9df8898f50dbeac35a8f2f20b43644fb1fa
SHA256

68ca177d42ab79022ede5d703f2f3b4e3de42fc1ae56a531b50f66f3339721f8
SHA512

32abc0a370d950b619a7ebb13bb2b497a318ff0043345a5523598465d8a8bf7000d2d5b52e1cac62df6fd21ba143b1df43ff0b392a8c39e8df7e49d5982ae294
SSDEEP

49152:zKC9Pmf3aSVILfYuExL71E7gLkPjDv5DIuZ4/vR55kmjCoyfR5L:zP2JeYPOPjlDxIr5Oo6V

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
behavioral11/memory/4844-0-0x00007FF71D420000-0x00007FF71DF99000-memory.dmp	upx
behavioral11/memory/4844-1-0x00007FF71D420000-0x00007FF71DF99000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\68ca177d42ab79022ede5d703f2f3b4e3de42fc1ae56a531b50f66f3339721f8.exe
"C:\Users\Admin\AppData\Local\Temp\68ca177d42ab79022ede5d703f2f3b4e3de42fc1ae56a531b50f66f3339721f8.exe"
1⤵
PID:4844

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3976,i,1999448010053300448,1112699187621658374,262144 --variations-seed-version --mojo-platform-channel-handle=4000 /prefetch:8
1⤵
PID:2576

memory/4844-0-0x00007FF71D420000-0x00007FF71DF99000-memory.dmp

Filesize
11.5MB

Download
memory/4844-1-0x00007FF71D420000-0x00007FF71DF99000-memory.dmp

Filesize
11.5MB

Download