Analysis
-
max time kernel
135s -
max time network
104s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
23-05-2024 00:29
General
-
Target
2024-05-23_336edb6a38047927001617f8b3f49b83_xiaoba.exe
-
Size
1.2MB
-
MD5
336edb6a38047927001617f8b3f49b83
-
SHA1
62b1a793f73deec635619069b827a29d801e8cc4
-
SHA256
0e6dc6e72f68adb1c691e9d2dbf50fce30bac57f1c119337502a4788fc4f215f
-
SHA512
8f88cbc73317b13cdcc9b9552125e2cd2b7ab662e9c112d957d53713b4232baf219e17de360976c9ec6f654c347bfa315278b8001344fbb3c575e2d9009dbf62
-
SSDEEP
24576:UfZanlLXYSKEDRWTg+YeP/YkOqLKdbb6MGYwF2Rr:UPSKRM+Y2ZPLuKz2h
Score
9/10
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 25 IoCs
-
UPX packed file 25 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 30 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-23_336edb6a38047927001617f8b3f49b83_xiaoba.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-23_336edb6a38047927001617f8b3f49b83_xiaoba.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
4KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB