Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-05-2024 18:20

General

  • Target

    UpDate.exe

  • Size

    293KB

  • MD5

    fb20c396c35775d991619856b46284df

  • SHA1

    bc7c47be95fb7b27ca34bd32b6eafc16cdf7da50

  • SHA256

    3c94682f5179b9f1e23513cf7d3220054eede3084b51a080faa3d462d4940a50

  • SHA512

    ee0d066c6b16297ffb82c5439eafb3d2b4d922e4a7af40b7e23201084d53d950935d5c0a11e45bd883281f17c20ff5e867dec0f195caa0a288ebe46b6883d7fa

  • SSDEEP

    6144:v7s6Op5tsqvPzcrwwQEPyzh2+4tLDYER/bOnrA3HCY8ZTZd4Ls1woSMci:vYfr6qv7xwQSmh2+41kM/qr6iDNZdsoI

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\UpDate.exe
    "C:\Users\Admin\AppData\Local\Temp\UpDate.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:464

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/464-0-0x0000000000400000-0x00000000004E7000-memory.dmp

    Filesize

    924KB

  • memory/464-2-0x0000000000400000-0x00000000004E7000-memory.dmp

    Filesize

    924KB