db70fd132b9eb59e94c123589b64665cd0446586da7243d84b7271638be08193

Analysis

max time kernel
41s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
03/10/2022, 13:21

Target

db70fd132b9eb59e94c123589b64665cd0446586da7243d84b7271638be08193.exe
Size

43KB
MD5

6913fd0b7cf42c6bc466d52575d1d1f0
SHA1

637b805c072ba3a974e77fc8cf19ec1ad88298ca
SHA256

db70fd132b9eb59e94c123589b64665cd0446586da7243d84b7271638be08193
SHA512

d28c3ed694aaa5c07577fe78219a42cdfd4110591c7845c2aa003cecc2d556015a26f6e7052c30d99a125e4ade64437ab52783ff5eb8819a3111e700db2d8e5e
SSDEEP

768:u5DZ2Sai733ZL4OsPDsJOrvNQ3wzbYYiUCb6BJZObQC73m9BaNV9kAVy+6f/heT2:ji18OysUQpYiUCb9Z3dggy+9

Score

5^/10

Drops file in System32 directory 5 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\tmp	db70fd132b9eb59e94c123589b64665cd0446586da7243d84b7271638be08193.exe
File created	C:\Windows\SysWOW64\tmp	db70fd132b9eb59e94c123589b64665cd0446586da7243d84b7271638be08193.exe
File created	C:\Windows\SysWOW64\WmInit.dat	db70fd132b9eb59e94c123589b64665cd0446586da7243d84b7271638be08193.exe
File opened for modification	C:\Windows\SysWOW64\WmInit.exe	db70fd132b9eb59e94c123589b64665cd0446586da7243d84b7271638be08193.exe
File created	C:\Windows\SysWOW64\WmInit.exe	db70fd132b9eb59e94c123589b64665cd0446586da7243d84b7271638be08193.exe

C:\Users\Admin\AppData\Local\Temp\db70fd132b9eb59e94c123589b64665cd0446586da7243d84b7271638be08193.exe
"C:\Users\Admin\AppData\Local\Temp\db70fd132b9eb59e94c123589b64665cd0446586da7243d84b7271638be08193.exe"
1⤵
- Drops file in System32 directory
PID:704

memory/704-54-0x0000000000400000-0x000000000050B000-memory.dmp

Filesize
1.0MB

Download
memory/704-55-0x0000000000400000-0x000000000050B000-memory.dmp

Filesize
1.0MB

Download