67e437c2072cfbf80db9a1b760bc14c84954111c16f87d6a3ac00e5f2c6f7161

Analysis

max time kernel
69s
max time network
167s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
28/10/2022, 22:09

Target

67e437c2072cfbf80db9a1b760bc14c84954111c16f87d6a3ac00e5f2c6f7161.exe
Size

34KB
MD5

0cc3c3b7da5e9c3aff29c73a91c57521
SHA1

a76b4ab3566036d33f847c2129113c3cdede47b2
SHA256

67e437c2072cfbf80db9a1b760bc14c84954111c16f87d6a3ac00e5f2c6f7161
SHA512

6872a763b79883e53be5a70f4d2914d84c998f64456dcf6568faf5ad2ce1385d3e5fc1688c6d716e540d474b396fbb0953f7caff7f24105d4e635caf0c252b20
SSDEEP

768:w7dxDakM/ZRSuMIj9g22EdaJrT5NfYthCyFkUE45RgbpnxOTTZu:KG9RSuMIpgEdaJR56MyM45Sph

Score

5^/10

Drops file in System32 directory 3 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\rwbux.exe	67e437c2072cfbf80db9a1b760bc14c84954111c16f87d6a3ac00e5f2c6f7161.exe
File opened for modification	C:\Windows\SysWOW64\rwbux.exe	67e437c2072cfbf80db9a1b760bc14c84954111c16f87d6a3ac00e5f2c6f7161.exe
File opened for modification	C:\Windows\SysWOW64\kernel32.exe	67e437c2072cfbf80db9a1b760bc14c84954111c16f87d6a3ac00e5f2c6f7161.exe

C:\Users\Admin\AppData\Local\Temp\67e437c2072cfbf80db9a1b760bc14c84954111c16f87d6a3ac00e5f2c6f7161.exe
"C:\Users\Admin\AppData\Local\Temp\67e437c2072cfbf80db9a1b760bc14c84954111c16f87d6a3ac00e5f2c6f7161.exe"
1⤵
- Drops file in System32 directory
PID:1448
- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  "C:\Program Files (x86)\Internet Explorer\iexplore.exe"
  2⤵
  PID:1876

memory/1448-54-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1448-56-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1448-55-0x0000000075921000-0x0000000075923000-memory.dmp

Filesize
8KB

Download
memory/1448-58-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download