a4240ea0e8a916d15f8391edef9705ab4de1f516dd360f0a336c5358686d434b

Analysis

max time kernel
899s
max time network
480s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/06/2026, 00:35

Target
Blank-Grabber-main/Blank Grabber/Components/upx.exe
Size 525KB
Sample260620-axe42sdx8x
SHA256 a4240ea0e8a916d15f8391edef9705ab4de1f516dd360f0a336c5358686d434b
MD5 8a98406e32ed6139bd9e75342d452948
SHA1 ed77737b88a7351d0bc5f542ddb7ce84f8f95588
SHA512 f5b17975560d97308a6ee66845225715e82bade9df7bc36821c76fe67fcf8d22929bf21b85e28dd11b7399d0109ab1f3786fd2010c2e5023d3a93d2bd5cf678b
SSDEEP 12288:fOHsWPQsJdQmiR0eYG16fyP8RHzS75CaNgMYqIW7I2:2QmiWK16rRHzS7U6ip2
TLSH
T196B4230749296B6BF1B1C1740DFA59D224D4FCB6D299A45893F02E2934BA5BECFC2530
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral18/memory/1948-0-0x0000000000400000-0x0000000000603000-memory.dmp	upx
behavioral18/memory/1948-1-0x0000000000400000-0x0000000000603000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\Blank-Grabber-main\Blank Grabber\Components\upx.exe
"C:\Users\Admin\AppData\Local\Temp\Blank-Grabber-main\Blank Grabber\Components\upx.exe"
1⤵
PID:1948

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5580

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:5760

memory/1948-0-0x0000000000400000-0x0000000000603000-memory.dmp

Download

memory/1948-1-0x0000000000400000-0x0000000000603000-memory.dmp

Download