871761e2556c306e5507c278fee29c3f507d4eb0efac36cb98dc432daa15784f

Resubmissions

23-04-2023 17:07

23-04-2023 17:03

23-04-2023 16:56

max time kernel
30s
max time network
34s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
23-04-2023 17:07

Target

Hexa v1.5/Hexa/HexaBuilder.exe
Size

17.7MB
MD5

31f58c41699087b5d3fce3aa878c245b
SHA1

1faabe7901df291e5a7436b0779a3d41e6c65e25
SHA256

785b4e96fc1b0eaa7699e806c5adb47c9eb84a5c17e9e52c70f4d1716be07acc
SHA512

aba3b8aec00ecda59ccce171f75af1553be29eaffa315235da761d2816ec7150104da681be96e5fb45b7508b39c11120ef013608cf72c3d09fd7a8eb62423a55
SSDEEP

393216:t2u7L/mT9dM/ISWdQuslN/m3pql96/oWOv+9fIWBJHUxjyLNbUy:t2CLeTT6ISWdQu4KyQ/orvSQ00xjqNbP

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
272	HexaBuilder.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1740 wrote to memory of 272	1740	HexaBuilder.exe	28
PID 1740 wrote to memory of 272	1740	HexaBuilder.exe	28
PID 1740 wrote to memory of 272	1740	HexaBuilder.exe	28

C:\Users\Admin\AppData\Local\Temp\Hexa v1.5\Hexa\HexaBuilder.exe
"C:\Users\Admin\AppData\Local\Temp\Hexa v1.5\Hexa\HexaBuilder.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1740
- C:\Users\Admin\AppData\Local\Temp\Hexa v1.5\Hexa\HexaBuilder.exe
  "C:\Users\Admin\AppData\Local\Temp\Hexa v1.5\Hexa\HexaBuilder.exe"
  2⤵
  - Loads dropped DLL
  PID:272

C:\Users\Admin\AppData\Local\Temp\_MEI17402\python310.dll

Filesize
4.3MB

MD5
deaf0c0cc3369363b800d2e8e756a402

SHA1
3085778735dd8badad4e39df688139f4eed5f954

SHA256
156cf2b64dd0f4d9bdb346b654a11300d6e9e15a65ef69089923dafc1c71e33d

SHA512
5cac1d92af7ee18425b5ee8e7cd4e941a9ddffb4bc1c12bb8aeabeed09acec1ff0309abc41a2e0c8db101fee40724f8bfb27a78898128f8746c8fe01c1631989

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI17402\python310.dll

Filesize
4.3MB

MD5
deaf0c0cc3369363b800d2e8e756a402

SHA1
3085778735dd8badad4e39df688139f4eed5f954

SHA256
156cf2b64dd0f4d9bdb346b654a11300d6e9e15a65ef69089923dafc1c71e33d

SHA512
5cac1d92af7ee18425b5ee8e7cd4e941a9ddffb4bc1c12bb8aeabeed09acec1ff0309abc41a2e0c8db101fee40724f8bfb27a78898128f8746c8fe01c1631989

Download Submit