88f6d5c1e665c063113bb8065ab36c49daecd10309030c948ce3aae4857c557f

Analysis

max time kernel
44s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
01/12/2022, 08:53

Target

88f6d5c1e665c063113bb8065ab36c49daecd10309030c948ce3aae4857c557f.exe
Size

140KB
MD5

19b7e083a3572264d7b228686cf08e70
SHA1

9d9af2c0e361d85184aee20a694cb5868433d058
SHA256

88f6d5c1e665c063113bb8065ab36c49daecd10309030c948ce3aae4857c557f
SHA512

24ae2a02a4a6715eb0403c68d210c4c60770e389aa4295d35002617ad367caf677cdc2f0e5833f3ca3ab169ffb099030cfbd1a4602938c21905a6fdc7b5768e7
SSDEEP

3072:KNSMMfRY0NBQwcWA07nBy+nghqgBgg/Y2AiVQSzid8:KNSrS0NBQwXd75gBg72JQSzM8

Score

5^/10

Drops file in System32 directory 3 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\oirijshr.ini	88f6d5c1e665c063113bb8065ab36c49daecd10309030c948ce3aae4857c557f.exe
File opened for modification	C:\Windows\SysWOW64\oirijshr.ini	88f6d5c1e665c063113bb8065ab36c49daecd10309030c948ce3aae4857c557f.exe
File created	C:\Windows\SysWOW64\oirijshr265557b7.sys	88f6d5c1e665c063113bb8065ab36c49daecd10309030c948ce3aae4857c557f.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
468	Process not Found

C:\Users\Admin\AppData\Local\Temp\88f6d5c1e665c063113bb8065ab36c49daecd10309030c948ce3aae4857c557f.exe
"C:\Users\Admin\AppData\Local\Temp\88f6d5c1e665c063113bb8065ab36c49daecd10309030c948ce3aae4857c557f.exe"
1⤵
- Drops file in System32 directory
PID:1468

memory/1468-54-0x0000000076BA1000-0x0000000076BA3000-memory.dmp

Filesize
8KB

Download