b14f7ab4407668280e27187531161736715f8e6292906a858a34ab2a2719ff50

Analysis

max time kernel
54s
max time network
34s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
01/12/2022, 19:20

Target

b14f7ab4407668280e27187531161736715f8e6292906a858a34ab2a2719ff50.exe
Size

42KB
MD5

13c81f6a94a02a7ed7db0d10f7a36b43
SHA1

9c4702cb88a682e27180857801a82adbc034e9d9
SHA256

b14f7ab4407668280e27187531161736715f8e6292906a858a34ab2a2719ff50
SHA512

f5580f580bb6a7ccb9fb720fbaf0f610119f5c1c5d24827084b5b06ce0917aa994da5c79551a4f5748070f381b6a940875de30d7815ffb67d293dc6c48e6ddd7
SSDEEP

768:CNDZ2P194FnpQPn4NSTp5CVqqtWiUCbYBHYRcpoq0mca2Tdv2AjJox:0p64wAVPtWiUCbXFEzwj

Score

5^/10

Drops file in System32 directory 5 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\WmInit.dat	b14f7ab4407668280e27187531161736715f8e6292906a858a34ab2a2719ff50.exe
File opened for modification	C:\Windows\SysWOW64\WmInit.exe	b14f7ab4407668280e27187531161736715f8e6292906a858a34ab2a2719ff50.exe
File created	C:\Windows\SysWOW64\WmInit.exe	b14f7ab4407668280e27187531161736715f8e6292906a858a34ab2a2719ff50.exe
File opened for modification	C:\Windows\SysWOW64\tmp	b14f7ab4407668280e27187531161736715f8e6292906a858a34ab2a2719ff50.exe
File created	C:\Windows\SysWOW64\tmp	b14f7ab4407668280e27187531161736715f8e6292906a858a34ab2a2719ff50.exe

C:\Users\Admin\AppData\Local\Temp\b14f7ab4407668280e27187531161736715f8e6292906a858a34ab2a2719ff50.exe
"C:\Users\Admin\AppData\Local\Temp\b14f7ab4407668280e27187531161736715f8e6292906a858a34ab2a2719ff50.exe"
1⤵
- Drops file in System32 directory
PID:1168

memory/1168-54-0x0000000000400000-0x000000000055F000-memory.dmp

Filesize
1.4MB

Download
memory/1168-55-0x0000000000400000-0x000000000055F000-memory.dmp

Filesize
1.4MB

Download