3a7a686aca0cbc997ddeee7362f4e4f0f4e165a061fcdd35b1c84226079d1fd7

Analysis

max time kernel
140s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
31-03-2023 03:08

Target

3a7a686aca0cbc997ddeee7362f4e4f0f4e165a061fcdd35b1c84226079d1fd7.exe
Size

1.1MB
MD5

2971e5f73247f014e6b56ae2abbdd47e
SHA1

09c4004735b41d8e7a6b72a35d489ae356ae2fc9
SHA256

3a7a686aca0cbc997ddeee7362f4e4f0f4e165a061fcdd35b1c84226079d1fd7
SHA512

07b1d0fc4b846703f2d5a709b97bba72b9f6c50af64be2257e53de0923378a1e365f873c221353da9afb66b7cb697d78b2560dcb4afec103c95a3c09c8d7c095
SSDEEP

24576:ThuyVGye/zYLTpjz7vyi5bXduszfwl06jZ4eDo2h9b:1uyVGRLYxPrBJLzwl06jOeD9h1

Score

4^/10

Drops file in Windows directory 1 IoCs

Processes:

3a7a686aca0cbc997ddeee7362f4e4f0f4e165a061fcdd35b1c84226079d1fd7.exe

description ioc process

File created C:\Windows\sdtEx.dll 3a7a686aca0cbc997ddeee7362f4e4f0f4e165a061fcdd35b1c84226079d1fd7.exe

description	ioc	process
File created	C:\Windows\sdtEx.dll	3a7a686aca0cbc997ddeee7362f4e4f0f4e165a061fcdd35b1c84226079d1fd7.exe

C:\Users\Admin\AppData\Local\Temp\3a7a686aca0cbc997ddeee7362f4e4f0f4e165a061fcdd35b1c84226079d1fd7.exe
"C:\Users\Admin\AppData\Local\Temp\3a7a686aca0cbc997ddeee7362f4e4f0f4e165a061fcdd35b1c84226079d1fd7.exe"
1⤵
- Drops file in Windows directory
PID:1264

C:\Users\Admin\AppData\Local\Temp\IdCardEx.ini
Filesize
71B

MD5
61a425a8f6c75829301eac9f72053e41

SHA1
e6e53d7b7447ef9bd08bcc555a3662574c45505b

SHA256
3a59dd7556a07e3650e8e55efd4d3504ebd3dcd51ad73422e52fdfcb92d1379b

SHA512
cc2fd8e38ed6b1210d36f5d4a40d9fed3503ee50303f05ad18ef26e3f4ade4e9948afa5f3e37a8c835066cafb027cc97655f26caa13f5524d06d0ba2248d9b9c

Download Submit
memory/1264-133-0x0000000000400000-0x0000000000711000-memory.dmp

Filesize
3.1MB

Download
memory/1264-134-0x0000000000400000-0x0000000000711000-memory.dmp

Filesize
3.1MB

Download
memory/1264-135-0x0000000000400000-0x0000000000711000-memory.dmp

Filesize
3.1MB

Download
memory/1264-136-0x0000000000400000-0x0000000000711000-memory.dmp

Filesize
3.1MB

Download
memory/1264-137-0x0000000000400000-0x0000000000711000-memory.dmp

Filesize
3.1MB

Download
memory/1264-145-0x0000000002700000-0x0000000002701000-memory.dmp

Filesize
4KB

Download
memory/1264-146-0x0000000000400000-0x0000000000711000-memory.dmp

Filesize
3.1MB

Download