1b1906752fbb0d56e006a220af752a21981fd09a5f38f954cd069fc815ccd62f

Analysis

max time kernel
30s
max time network
34s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 15:38

Target

1b1906752fbb0d56e006a220af752a21981fd09a5f38f954cd069fc815ccd62f.exe
Size

173KB
MD5

4d6568e05e022021041411d9f5ae8856
SHA1

61089e972ff2b039b93ce8852a818fabd799b2ec
SHA256

1b1906752fbb0d56e006a220af752a21981fd09a5f38f954cd069fc815ccd62f
SHA512

a275e5bb7b180aaacc90654666d65bc704eb07c7230b63f3973f185192f715943c9a05771cbcc644f6d4a1c901d713d1e7681e783ab86538400e6fe6d567decc
SSDEEP

3072:uFYZzOR43lGfMuTsPO7dXcYjwyhuuWQvKgTon861ocAF+kV2ZAVvc9:UYZOI43fO8mOJ2Zmv

Score

8^/10

Executes dropped EXE 1 IoCs

Processes:

antivar.exe

pid process

1212 antivar.exe

pid	process
1212	antivar.exe

Drops file in System32 directory 3 IoCs

Processes:

1b1906752fbb0d56e006a220af752a21981fd09a5f38f954cd069fc815ccd62f.exeantivar.exe

description	ioc	process
File opened for modification	C:\Windows\SysWOW64\antivar.exe	1b1906752fbb0d56e006a220af752a21981fd09a5f38f954cd069fc815ccd62f.exe
File created	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\sLT.exf	antivar.exe
File created	C:\Windows\SysWOW64\antivar.exe	1b1906752fbb0d56e006a220af752a21981fd09a5f38f954cd069fc815ccd62f.exe

C:\Users\Admin\AppData\Local\Temp\1b1906752fbb0d56e006a220af752a21981fd09a5f38f954cd069fc815ccd62f.exe
"C:\Users\Admin\AppData\Local\Temp\1b1906752fbb0d56e006a220af752a21981fd09a5f38f954cd069fc815ccd62f.exe"
1⤵
- Drops file in System32 directory
PID:1776

C:\Windows\SysWOW64\antivar.exe
Filesize
173KB

MD5
4d6568e05e022021041411d9f5ae8856

SHA1
61089e972ff2b039b93ce8852a818fabd799b2ec

SHA256
1b1906752fbb0d56e006a220af752a21981fd09a5f38f954cd069fc815ccd62f

SHA512
a275e5bb7b180aaacc90654666d65bc704eb07c7230b63f3973f185192f715943c9a05771cbcc644f6d4a1c901d713d1e7681e783ab86538400e6fe6d567decc

Download Submit
memory/1776-54-0x0000000075E61000-0x0000000075E63000-memory.dmp

Filesize
8KB

Download