90c499c51251e49b3ad1ab2f0b9235077cdeb720ce27fd2952e626f75bc5a350

Analysis

max time kernel
165s
max time network
182s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 15:31

Target

90c499c51251e49b3ad1ab2f0b9235077cdeb720ce27fd2952e626f75bc5a350.exe
Size

37KB
MD5

4c8f03e28945904e85544ea44c9a835f
SHA1

bfc9ad1e4a4a7352313c1c18cab79275aa262b5d
SHA256

90c499c51251e49b3ad1ab2f0b9235077cdeb720ce27fd2952e626f75bc5a350
SHA512

2c8bee9cbe1416c4737497074b198aca93e97bcb2ad4920dd24199773ac429ebd6a2dc22099316691846aa7e3d930ae23629cebc2226e8db4cca367c2fc789d6
SSDEEP

768:QVyAqcQ4gBdyj5O6Gn2F/AIssWSaUvsjgv0xMDb5+:7AqcQ40dmGnussWSaUvGLxM5

Score

8^/10

Executes dropped EXE 1 IoCs

Processes:

zaok.exe

pid process

1320 zaok.exe
Drops file in System32 directory 1 IoCs

Processes:

zaok.exe

description ioc process

File created C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\ffifssssfdfsf4f.ini zaok.exe

pid	process
1320	zaok.exe

description	ioc	process
File created	C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\ffifssssfdfsf4f.ini	zaok.exe

Drops file in Windows directory 2 IoCs

Processes:

90c499c51251e49b3ad1ab2f0b9235077cdeb720ce27fd2952e626f75bc5a350.exe

description	ioc	process
File created	C:\Windows\zaok.exe	90c499c51251e49b3ad1ab2f0b9235077cdeb720ce27fd2952e626f75bc5a350.exe
File opened for modification	C:\Windows\zaok.exe	90c499c51251e49b3ad1ab2f0b9235077cdeb720ce27fd2952e626f75bc5a350.exe

C:\Users\Admin\AppData\Local\Temp\90c499c51251e49b3ad1ab2f0b9235077cdeb720ce27fd2952e626f75bc5a350.exe
"C:\Users\Admin\AppData\Local\Temp\90c499c51251e49b3ad1ab2f0b9235077cdeb720ce27fd2952e626f75bc5a350.exe"
1⤵
- Drops file in Windows directory
PID:912

C:\Windows\zaok.exe
Filesize
37KB

MD5
4c8f03e28945904e85544ea44c9a835f

SHA1
bfc9ad1e4a4a7352313c1c18cab79275aa262b5d

SHA256
90c499c51251e49b3ad1ab2f0b9235077cdeb720ce27fd2952e626f75bc5a350

SHA512
2c8bee9cbe1416c4737497074b198aca93e97bcb2ad4920dd24199773ac429ebd6a2dc22099316691846aa7e3d930ae23629cebc2226e8db4cca367c2fc789d6

Download Submit
C:\Windows\zaok.exe
Filesize
37KB

MD5
4c8f03e28945904e85544ea44c9a835f

SHA1
bfc9ad1e4a4a7352313c1c18cab79275aa262b5d

SHA256
90c499c51251e49b3ad1ab2f0b9235077cdeb720ce27fd2952e626f75bc5a350

SHA512
2c8bee9cbe1416c4737497074b198aca93e97bcb2ad4920dd24199773ac429ebd6a2dc22099316691846aa7e3d930ae23629cebc2226e8db4cca367c2fc789d6

Download Submit
memory/912-54-0x00000000751A1000-0x00000000751A3000-memory.dmp

Filesize
8KB

Download