aab27bd5547d35dc159288f3b5b8760f21b0cfec86e8f0032b49dd0410f232bc

Analysis

max time kernel
140s
max time network
118s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
06-07-2024 01:41

Target

aab27bd5547d35dc159288f3b5b8760f21b0cfec86e8f0032b49dd0410f232bc.exe
Size

84KB
MD5

92d905bdfe13c798a2cda2bbacdad932
SHA1

66f1355f16ac1e328243e877880eb6e45e8b30e2
SHA256

aab27bd5547d35dc159288f3b5b8760f21b0cfec86e8f0032b49dd0410f232bc
SHA512

5c96c7be222d5c836402df302f5a1866df72bcad3d13643e8703e536cea9c6e42fde344ca79d564051fd3cd93326e834b3c4b7f59e5591d61cba3d59b7c9a180
SSDEEP

1536:+sE5jlwWrw6I3N8SFsngkZ4nJ9jHZN+4Ie6fFF6rS7cnouy8VAt:tE5Rw6GN8wsngi4nJ7N+P7Foc8outy

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1888-0-0x0000000000400000-0x0000000000438000-memory.dmp	upx
behavioral1/memory/1888-1-0x0000000000400000-0x0000000000438000-memory.dmp	upx

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1888	aab27bd5547d35dc159288f3b5b8760f21b0cfec86e8f0032b49dd0410f232bc.exe

C:\Users\Admin\AppData\Local\Temp\aab27bd5547d35dc159288f3b5b8760f21b0cfec86e8f0032b49dd0410f232bc.exe
"C:\Users\Admin\AppData\Local\Temp\aab27bd5547d35dc159288f3b5b8760f21b0cfec86e8f0032b49dd0410f232bc.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1888

memory/1888-0-0x0000000000400000-0x0000000000438000-memory.dmp

Filesize
224KB

Download
memory/1888-1-0x0000000000400000-0x0000000000438000-memory.dmp

Filesize
224KB

Download