b5732ac85589fdbe360af0d41fe4b409796fe414999c785bcf11f9b092ecf028

Analysis

max time kernel
146s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
21-05-2024 14:22

Target

b5732ac85589fdbe360af0d41fe4b409796fe414999c785bcf11f9b092ecf028.exe
Size

3.5MB
MD5

939261459f9c29343dd1d6bd51f3709e
SHA1

b1110b91465ebc137402a3c30842b0e87e870365
SHA256

b5732ac85589fdbe360af0d41fe4b409796fe414999c785bcf11f9b092ecf028
SHA512

697e447e742854cc4a9111b6451f2eed31d8d87b5db595ac6958ddd4f93110d1ad5e154c01a8b64db1cd7e26dcfffd637e183315a6aeeb7899ebc76c64f321db
SSDEEP

98304:yrhykOZOI5gDEmc6Bmc3NshwCZwPSfl7R3e1T:yrhsUvEckwCZxltO1

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
behavioral2/memory/3728-0-0x00007FF73FDC0000-0x00007FF740FFF000-memory.dmp	upx
behavioral2/memory/3728-1-0x00007FF73FDC0000-0x00007FF740FFF000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

b5732ac85589fdbe360af0d41fe4b409796fe414999c785bcf11f9b092ecf028.exe

pid	process
3728	b5732ac85589fdbe360af0d41fe4b409796fe414999c785bcf11f9b092ecf028.exe
3728	b5732ac85589fdbe360af0d41fe4b409796fe414999c785bcf11f9b092ecf028.exe

C:\Users\Admin\AppData\Local\Temp\b5732ac85589fdbe360af0d41fe4b409796fe414999c785bcf11f9b092ecf028.exe
"C:\Users\Admin\AppData\Local\Temp\b5732ac85589fdbe360af0d41fe4b409796fe414999c785bcf11f9b092ecf028.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3728

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3952 --field-trial-handle=2276,i,11674642242468042059,14711253743544118298,262144 --variations-seed-version /prefetch:8
1⤵
PID:3660

memory/3728-0-0x00007FF73FDC0000-0x00007FF740FFF000-memory.dmp

Filesize
18.2MB

Download
memory/3728-1-0x00007FF73FDC0000-0x00007FF740FFF000-memory.dmp

Filesize
18.2MB

Download