Analysis
-
max time kernel
132s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
23-05-2024 00:56
General
-
Target
2024-05-23_e42ee1d7c7f7369c983caf2655205976_xiaoba.exe
-
Size
1.1MB
-
MD5
e42ee1d7c7f7369c983caf2655205976
-
SHA1
77ee8cc38f205aa34ec5e031eaf48aea2803b746
-
SHA256
e68a9620b2d488c311bdd273d5ad1c6e15a4e33cce99a7d511f62d4ecda410eb
-
SHA512
36703c5ad968f411f14a117e1309ec0fd3459c127e0e0b79439f9b189d413fc3da1b1bb116bdccf07402f00d96f14b9eb7480a2b42b695347adc97b1d751ee1e
-
SSDEEP
24576:kfZanlLXYSKEDRWTg+YeP/YkOqLK5bZ6MGY0r:kPSKRM+Y2ZPLKUV
Score
9/10
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 24 IoCs
-
UPX packed file 24 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 30 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-23_e42ee1d7c7f7369c983caf2655205976_xiaoba.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-23_e42ee1d7c7f7369c983caf2655205976_xiaoba.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
4KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB