Analysis
-
max time kernel
12s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
28/03/2025, 05:21
General
-
Target
Files/1dc75c16bf526f435cbdf05c73df57040791b7809d64e158b0b66565e444b3d8.exe
-
Size
121KB
-
MD5
cfb23e22eacdf2343fc0f792b49b55c9
-
SHA1
5bb717295c8bd95f81b840257b39e0957e967e5a
-
SHA256
1dc75c16bf526f435cbdf05c73df57040791b7809d64e158b0b66565e444b3d8
-
SHA512
c283d7c9f175f5ca8215ae394bf1938e80feb8e0e50e280ce0903f4fe59560553ac32ca28924f84430d889ef19c44a0db88cc3e74750bfbbd2fbb0209ef2fbf7
-
SSDEEP
3072:PrYgvm0rkfpICpDsZipXW7SSJz6OFHO8UnXRZrZG:PEgvm0gpGgXuJdJAB
Score
5/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\Files\1dc75c16bf526f435cbdf05c73df57040791b7809d64e158b0b66565e444b3d8.exe"C:\Users\Admin\AppData\Local\Temp\Files\1dc75c16bf526f435cbdf05c73df57040791b7809d64e158b0b66565e444b3d8.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
204KB
-
Filesize
116KB
-
Filesize
40KB
-
Filesize
116KB
-
Filesize
116KB