cbd4901f39842c177e401e8fc0926cad2e388eb8999b80829ffba7a83ebe3801

Analysis

max time kernel
280s
max time network
321s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 09:49

Target

cbd4901f39842c177e401e8fc0926cad2e388eb8999b80829ffba7a83ebe3801.exe
Size

58KB
MD5

20fb70c6dceaf1ef667d9b89a2f33e45
SHA1

370ded8705dcc07bdb0cba8b954b486906cb5170
SHA256

cbd4901f39842c177e401e8fc0926cad2e388eb8999b80829ffba7a83ebe3801
SHA512

e205f76a4d9daf0ad9f6f43d322186e9056b6094fddcca5ba467a37b27c3fe9b98486328352116ca39b7dbcc6d61c03a02589740adf868cdd3f30631920b4b22
SSDEEP

768:iX8amTnBCTpUtWBjW43q2Wwat4jrxTm5ZDDnyIfXyH3dWUAohfjiT5edir:iX81TBttWhWW/knzfXyHt0qfWT5Me

Score

8^/10

Executes dropped EXE 1 IoCs

Processes:

iaecas.exe

pid process

1236 iaecas.exe
Loads dropped DLL 1 IoCs

Processes:

iaecas.exe

pid process

1236 iaecas.exe

pid	process
1236	iaecas.exe

pid	process
1236	iaecas.exe

Drops file in System32 directory 3 IoCs

Processes:

cbd4901f39842c177e401e8fc0926cad2e388eb8999b80829ffba7a83ebe3801.exeiaecas.exe

description	ioc	process
File opened for modification	C:\Windows\SysWOW64\iaecas.exe	cbd4901f39842c177e401e8fc0926cad2e388eb8999b80829ffba7a83ebe3801.exe
File created	C:\Windows\SysWOW64\gei33.dll	iaecas.exe
File created	C:\Windows\SysWOW64\iaecas.exe	cbd4901f39842c177e401e8fc0926cad2e388eb8999b80829ffba7a83ebe3801.exe

Suspicious behavior: RenamesItself 1 IoCs

Processes:

cbd4901f39842c177e401e8fc0926cad2e388eb8999b80829ffba7a83ebe3801.exe

pid process

5020 cbd4901f39842c177e401e8fc0926cad2e388eb8999b80829ffba7a83ebe3801.exe

pid	process
5020	cbd4901f39842c177e401e8fc0926cad2e388eb8999b80829ffba7a83ebe3801.exe

C:\Windows\SysWOW64\gei33.dll
Filesize
70KB

MD5
624a079b947055be2b863a732c96f1bf

SHA1
ee0b15b87429a2fba4cd84320cc6bc80b56cd40f

SHA256
e0f164a20b9158ecf883e1afa70f958b4e4854c26b46afbdfe60feea0b2d47e7

SHA512
ea0b535bcaeb4d19c9c5d0e7b0c94488f8fcd0703b38cdf7b8cdba7d6e6c7f123e7e29b21ed1cd9f69b561b11382e167c70fdf32bbde171f3b81dc2fac26057a

Download Submit
C:\Windows\SysWOW64\iaecas.exe
Filesize
58KB

MD5
20fb70c6dceaf1ef667d9b89a2f33e45

SHA1
370ded8705dcc07bdb0cba8b954b486906cb5170

SHA256
cbd4901f39842c177e401e8fc0926cad2e388eb8999b80829ffba7a83ebe3801

SHA512
e205f76a4d9daf0ad9f6f43d322186e9056b6094fddcca5ba467a37b27c3fe9b98486328352116ca39b7dbcc6d61c03a02589740adf868cdd3f30631920b4b22

Download Submit
C:\Windows\SysWOW64\iaecas.exe
Filesize
58KB

MD5
20fb70c6dceaf1ef667d9b89a2f33e45

SHA1
370ded8705dcc07bdb0cba8b954b486906cb5170

SHA256
cbd4901f39842c177e401e8fc0926cad2e388eb8999b80829ffba7a83ebe3801

SHA512
e205f76a4d9daf0ad9f6f43d322186e9056b6094fddcca5ba467a37b27c3fe9b98486328352116ca39b7dbcc6d61c03a02589740adf868cdd3f30631920b4b22

Download Submit