430c9d9e5d2e69aa29f03a35b46b3cfaf122dfee9cd265be2fec5183811e3ee0

Analysis

max time kernel
122s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
12-10-2022 08:25

Target

430c9d9e5d2e69aa29f03a35b46b3cfaf122dfee9cd265be2fec5183811e3ee0.exe
Size

2.8MB
MD5

9b976a215c5103053c424cf88bfda7fc
SHA1

576e50cb0bcd001c86443a15ba14d74b21e57e32
SHA256

430c9d9e5d2e69aa29f03a35b46b3cfaf122dfee9cd265be2fec5183811e3ee0
SHA512

b2274aecaa29f12048bbad59ec1616fa61095d9963715ba6ff84ba27f7a5df6a18404784172689b878c4194b67f5b7a0ce51f6f1a38e14fa2a1f99a8e5a90a6c
SSDEEP

49152:Y1FWItb3srb/T5vO90d7HjmAFd4A64nsfJa4Rq/md6Nq95ESng/v4hot4vZhHB1:O3z+vMENBu

Score

7^/10

Drops startup file 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RtkAudUService64.exe	430c9d9e5d2e69aa29f03a35b46b3cfaf122dfee9cd265be2fec5183811e3ee0.exe

C:\Users\Admin\AppData\Local\Temp\430c9d9e5d2e69aa29f03a35b46b3cfaf122dfee9cd265be2fec5183811e3ee0.exe
"C:\Users\Admin\AppData\Local\Temp\430c9d9e5d2e69aa29f03a35b46b3cfaf122dfee9cd265be2fec5183811e3ee0.exe"
1⤵
- Drops startup file
PID:2744