748bd9d409c673216b6054313e5edaf5422ca3013f8cdc8ab585de37912f398f

Analysis

max time kernel
189s
max time network
247s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
06/12/2022, 00:12

Target

748bd9d409c673216b6054313e5edaf5422ca3013f8cdc8ab585de37912f398f.exe
Size

2.7MB
MD5

4c9bec415c99a2ba65dabe182016eb2c
SHA1

a4ea067a113b0694ae15fe922f1b2226dc49e416
SHA256

748bd9d409c673216b6054313e5edaf5422ca3013f8cdc8ab585de37912f398f
SHA512

53ced704715500d9097638baad4caf9c2cf6ba46a805824cd7db4e1302205786c9ae04addb6400322dd9d82e0de558dd35f88fb3654f493642f43b5283141fa5
SSDEEP

49152:DpB0wH0uLU2oU/iQ2wNTOXdl8Vcdp8VqUgdd68VZ8kDAOMaU3tyhxQpqUmfU2FZo:DpB0wUIpKlrdDRAOMaU9y4Xms2FRY/ss

Score

4^/10

Drops file in Program Files directory 9 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\Windows Shell\4konya.exe	748bd9d409c673216b6054313e5edaf5422ca3013f8cdc8ab585de37912f398f.exe
File created	C:\Program Files (x86)\Windows Shell\mrun.exe	748bd9d409c673216b6054313e5edaf5422ca3013f8cdc8ab585de37912f398f.exe
File created	C:\Program Files (x86)\Windows Shell\__tmp_rar_sfx_access_check_240640296	748bd9d409c673216b6054313e5edaf5422ca3013f8cdc8ab585de37912f398f.exe
File created	C:\Program Files (x86)\Windows Shell\4konya.exe	748bd9d409c673216b6054313e5edaf5422ca3013f8cdc8ab585de37912f398f.exe
File opened for modification	C:\Program Files (x86)\Windows Shell\Interop.IWshRuntimeLibrary.dll	748bd9d409c673216b6054313e5edaf5422ca3013f8cdc8ab585de37912f398f.exe
File created	C:\Program Files (x86)\Windows Shell\mac.exe	748bd9d409c673216b6054313e5edaf5422ca3013f8cdc8ab585de37912f398f.exe
File opened for modification	C:\Program Files (x86)\Windows Shell\mac.exe	748bd9d409c673216b6054313e5edaf5422ca3013f8cdc8ab585de37912f398f.exe
File opened for modification	C:\Program Files (x86)\Windows Shell	748bd9d409c673216b6054313e5edaf5422ca3013f8cdc8ab585de37912f398f.exe
File created	C:\Program Files (x86)\Windows Shell\Interop.IWshRuntimeLibrary.dll	748bd9d409c673216b6054313e5edaf5422ca3013f8cdc8ab585de37912f398f.exe

C:\Users\Admin\AppData\Local\Temp\748bd9d409c673216b6054313e5edaf5422ca3013f8cdc8ab585de37912f398f.exe
"C:\Users\Admin\AppData\Local\Temp\748bd9d409c673216b6054313e5edaf5422ca3013f8cdc8ab585de37912f398f.exe"
1⤵
- Drops file in Program Files directory
PID:4936