fddb2b68bb2192c5538a8f4d10e8660e946af201ee0a8b62366adc018c10e29d

Analysis

max time kernel
90s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
02/12/2022, 17:33

Target

fddb2b68bb2192c5538a8f4d10e8660e946af201ee0a8b62366adc018c10e29d.exe
Size

97KB
MD5

9aa7d855c353c0ce52c59ea08f75d19b
SHA1

229be87582e5df01023a0f229e09f9e1e9489c85
SHA256

fddb2b68bb2192c5538a8f4d10e8660e946af201ee0a8b62366adc018c10e29d
SHA512

a80f851e8f1fe8613b0f9b6254aa636aa83138580f100b213ce1ff284076d4a96c5a85b2e4ada6b163eaf315833e9f5ef2cc924c314d0e6d21223e12c7ba91cd
SSDEEP

1536:cfL8WaRkYVE2N/ghGf5TgeYPYlEZYhqqZYn9ACkxWr7uFc1U3let:I4lRkAehGfzmuqTPryFm8let

Score

8^/10

Drops file in Drivers directory 2 IoCs

description	ioc	Process
File created	C:\Windows\System32\drivers\etc\__tmp_rar_sfx_access_check_240558312	fddb2b68bb2192c5538a8f4d10e8660e946af201ee0a8b62366adc018c10e29d.exe
File opened for modification	C:\Windows\System32\drivers\etc\hosts	fddb2b68bb2192c5538a8f4d10e8660e946af201ee0a8b62366adc018c10e29d.exe

C:\Users\Admin\AppData\Local\Temp\fddb2b68bb2192c5538a8f4d10e8660e946af201ee0a8b62366adc018c10e29d.exe
"C:\Users\Admin\AppData\Local\Temp\fddb2b68bb2192c5538a8f4d10e8660e946af201ee0a8b62366adc018c10e29d.exe"
1⤵
- Drops file in Drivers directory
PID:1828