Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
24-05-2024 04:07
General
-
Target
0e06395569f0ed4357e76e21d35a38141308a1609079cd0e74ef4e1d5b7346da.exe
-
Size
10.4MB
-
MD5
154b07c7d4b16686e6481b7dcb56d212
-
SHA1
d7348c9ec7651c094e2c63c36d88665b9e94b9ce
-
SHA256
0e06395569f0ed4357e76e21d35a38141308a1609079cd0e74ef4e1d5b7346da
-
SHA512
20ca6662dc994958f54020de1e7c9070075bd553d10212ee073bde16fa9adcc8078b22d71ba5b17b463370ffc45af71533a0ce780bef4938d4641b7564d8703f
-
SSDEEP
196608:5PC2Q+kwLPl6/vkW43OPUUwKfJ9klJM8fj5qwEXnKk1x5C7tYx5y2QKLrm:2wrl9vcBffJ9kljjqzs7Wx5cOrm
Score
7/10
Malware Config
Signatures
-
UPX packed file 12 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0e06395569f0ed4357e76e21d35a38141308a1609079cd0e74ef4e1d5b7346da.exe"C:\Users\Admin\AppData\Local\Temp\0e06395569f0ed4357e76e21d35a38141308a1609079cd0e74ef4e1d5b7346da.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2064-0-0x00000000009E8000-0x0000000001042000-memory.dmpFilesize
6.4MB
-
memory/2064-42-0x0000000000400000-0x0000000001AAE000-memory.dmpFilesize
22.7MB
-
memory/2064-1-0x0000000000230000-0x0000000000231000-memory.dmpFilesize
4KB
-
memory/2064-3-0x0000000000230000-0x0000000000231000-memory.dmpFilesize
4KB
-
memory/2064-5-0x0000000000230000-0x0000000000231000-memory.dmpFilesize
4KB
-
memory/2064-6-0x00000000002D0000-0x00000000002D1000-memory.dmpFilesize
4KB
-
memory/2064-8-0x00000000002D0000-0x00000000002D1000-memory.dmpFilesize
4KB
-
memory/2064-10-0x00000000002D0000-0x00000000002D1000-memory.dmpFilesize
4KB
-
memory/2064-13-0x0000000000320000-0x0000000000321000-memory.dmpFilesize
4KB
-
memory/2064-15-0x0000000000320000-0x0000000000321000-memory.dmpFilesize
4KB
-
memory/2064-18-0x0000000000330000-0x0000000000331000-memory.dmpFilesize
4KB
-
memory/2064-20-0x0000000000330000-0x0000000000331000-memory.dmpFilesize
4KB
-
memory/2064-23-0x0000000000340000-0x0000000000341000-memory.dmpFilesize
4KB
-
memory/2064-25-0x0000000000340000-0x0000000000341000-memory.dmpFilesize
4KB
-
memory/2064-28-0x0000000000350000-0x0000000000351000-memory.dmpFilesize
4KB
-
memory/2064-30-0x0000000000350000-0x0000000000351000-memory.dmpFilesize
4KB
-
memory/2064-31-0x0000000000360000-0x0000000000361000-memory.dmpFilesize
4KB
-
memory/2064-33-0x0000000000360000-0x0000000000361000-memory.dmpFilesize
4KB
-
memory/2064-35-0x0000000000360000-0x0000000000361000-memory.dmpFilesize
4KB
-
memory/2064-36-0x0000000000380000-0x0000000000381000-memory.dmpFilesize
4KB
-
memory/2064-38-0x0000000000380000-0x0000000000381000-memory.dmpFilesize
4KB
-
memory/2064-40-0x0000000000380000-0x0000000000381000-memory.dmpFilesize
4KB
-
memory/2064-44-0x0000000010000000-0x000000001003E000-memory.dmpFilesize
248KB
-
memory/2064-62-0x0000000010000000-0x000000001003E000-memory.dmpFilesize
248KB
-
memory/2064-58-0x0000000010000000-0x000000001003E000-memory.dmpFilesize
248KB
-
memory/2064-45-0x0000000010000000-0x000000001003E000-memory.dmpFilesize
248KB
-
memory/2064-47-0x0000000010000000-0x000000001003E000-memory.dmpFilesize
248KB
-
memory/2064-48-0x0000000010000000-0x000000001003E000-memory.dmpFilesize
248KB
-
memory/2064-64-0x0000000010000000-0x000000001003E000-memory.dmpFilesize
248KB
-
memory/2064-60-0x0000000010000000-0x000000001003E000-memory.dmpFilesize
248KB
-
memory/2064-56-0x0000000010000000-0x000000001003E000-memory.dmpFilesize
248KB
-
memory/2064-54-0x0000000010000000-0x000000001003E000-memory.dmpFilesize
248KB
-
memory/2064-52-0x0000000010000000-0x000000001003E000-memory.dmpFilesize
248KB
-
memory/2064-50-0x0000000010000000-0x000000001003E000-memory.dmpFilesize
248KB
-
memory/2064-87-0x0000000000400000-0x0000000001AAE000-memory.dmpFilesize
22.7MB
-
memory/2064-89-0x0000000000400000-0x0000000001AAE000-memory.dmpFilesize
22.7MB
-
memory/2064-88-0x0000000000400000-0x0000000001AAE000-memory.dmpFilesize
22.7MB
-
memory/2064-90-0x0000000000400000-0x0000000001AAE000-memory.dmpFilesize
22.7MB
-
memory/2064-91-0x0000000000400000-0x0000000001AAE000-memory.dmpFilesize
22.7MB
-
memory/2064-92-0x0000000000400000-0x0000000001AAE000-memory.dmpFilesize
22.7MB
-
memory/2064-93-0x00000000009E8000-0x0000000001042000-memory.dmpFilesize
6.4MB
-
memory/2064-94-0x0000000000400000-0x0000000001AAE000-memory.dmpFilesize
22.7MB