a26de82a616af413b4daa81eaabaad3af6ab571a2b080be4e4d60180601f47ed

Analysis

max time kernel
365s
max time network
461s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
01/12/2022, 20:19

Target

a26de82a616af413b4daa81eaabaad3af6ab571a2b080be4e4d60180601f47ed.exe
Size

69KB
MD5

a0e172182c5376440b6b4dc9231e6cba
SHA1

02dcb374a4256dafe3fea05b0f13768c93c1c9c8
SHA256

a26de82a616af413b4daa81eaabaad3af6ab571a2b080be4e4d60180601f47ed
SHA512

d592facacb39b9ce6b5651323d80a95bd35a4af0ea6e98e692d7e962aa268c971d2b65705a58efa4bbb2a7fcd834fd99f25f5d426c2485e3b48a3718fd4df0d3
SSDEEP

1536:g6l1rvkEZ23kI0eXxgGU0zfSx8ofz1Au4vlVXyCW+Lab/Mp2:f3rvRU3kDGU0zqx8ofWu4NVXyJ+Laop2

Score

5^/10

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{84A6478C-3707-4D6C-9507-E794F687AA67}.catalogItem	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{AA025F62-4E30-4DE5-8D80-C03DE144F7BE}.catalogItem	svchost.exe

C:\Users\Admin\AppData\Local\Temp\a26de82a616af413b4daa81eaabaad3af6ab571a2b080be4e4d60180601f47ed.exe
"C:\Users\Admin\AppData\Local\Temp\a26de82a616af413b4daa81eaabaad3af6ab571a2b080be4e4d60180601f47ed.exe"
1⤵
PID:3944

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
1⤵
- Drops file in System32 directory
PID:3724