b346ecdb079b1417db2bd8aa70b1e9bc396d3b29823073fc69827bd59e181f9e

Analysis

max time kernel
186s
max time network
221s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
01-12-2022 08:53

Target

b346ecdb079b1417db2bd8aa70b1e9bc396d3b29823073fc69827bd59e181f9e.exe
Size

138KB
MD5

8480e6244a5086969b114a2f1d968cd1
SHA1

57001644dc0d8f66b8e3a72fafb42aac22f3fa00
SHA256

b346ecdb079b1417db2bd8aa70b1e9bc396d3b29823073fc69827bd59e181f9e
SHA512

70d6ab4bf250c12170d9367a80ae6fb45b838d920be86505fcd9f6261ede69f814de992f4e94c98d6ea8577f62832508542259e284a35bbf7aa0794a2256d8c9
SSDEEP

3072:F0myqqiDm7HRRbVxU0PvcoF1ZBIdzj+57fGfS5RxuK:3JqxDbc0tF1fIdOBUS5Hf

Score

5^/10

Drops file in System32 directory 3 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\ortyeras.config	b346ecdb079b1417db2bd8aa70b1e9bc396d3b29823073fc69827bd59e181f9e.exe
File opened for modification	C:\Windows\SysWOW64\ortyeras.config	b346ecdb079b1417db2bd8aa70b1e9bc396d3b29823073fc69827bd59e181f9e.exe
File created	C:\Windows\SysWOW64\ortyeras602a-1f41.sys	b346ecdb079b1417db2bd8aa70b1e9bc396d3b29823073fc69827bd59e181f9e.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
668	Process not Found

C:\Users\Admin\AppData\Local\Temp\b346ecdb079b1417db2bd8aa70b1e9bc396d3b29823073fc69827bd59e181f9e.exe
"C:\Users\Admin\AppData\Local\Temp\b346ecdb079b1417db2bd8aa70b1e9bc396d3b29823073fc69827bd59e181f9e.exe"
1⤵
- Drops file in System32 directory
PID:1524