b36b12d320d60256c4cdb1ae33092ef20512094b81d74b08989f817d1825672f

Analysis

max time kernel
60s
max time network
35s
platform
windows7_x64
resource
win7-20230220-es
resource tags

arch:x64arch:x86image:win7-20230220-eslocale:es-esos:windows7-x64systemwindows
submitted
05-05-2023 18:16

Target

Contb-3sgtkuapmnbjkh.exe
Size

10.5MB
MD5

80cc297f56ea29ed4da01f45325b2d78
SHA1

88d03825ab3bad8a66d8d4e81fa5072d28715be4
SHA256

b36b12d320d60256c4cdb1ae33092ef20512094b81d74b08989f817d1825672f
SHA512

10cbffe7224172aa18bab4deaef236623d3d241434c5c4dd6481436c350766055706a84eb65a3df0e595e7561c737e11330b804debfaacbabd478377eff5e75f
SSDEEP

196608:cXY0WDfyGC0sKYu/PaQ021X5Sp6GemDMPw79hWvsYYPMkR2:uY0WDfDYQXpfaMPgWsYy

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
880	Contb-3sgtkuapmnbjkh.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1552 wrote to memory of 880	1552	Contb-3sgtkuapmnbjkh.exe	28
PID 1552 wrote to memory of 880	1552	Contb-3sgtkuapmnbjkh.exe	28
PID 1552 wrote to memory of 880	1552	Contb-3sgtkuapmnbjkh.exe	28

C:\Users\Admin\AppData\Local\Temp\Contb-3sgtkuapmnbjkh.exe
"C:\Users\Admin\AppData\Local\Temp\Contb-3sgtkuapmnbjkh.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1552
- C:\Users\Admin\AppData\Local\Temp\Contb-3sgtkuapmnbjkh.exe
  "C:\Users\Admin\AppData\Local\Temp\Contb-3sgtkuapmnbjkh.exe"
  2⤵
  - Loads dropped DLL
  PID:880

C:\Users\Admin\AppData\Local\Temp\_MEI15522\python311.dll

Filesize
5.5MB

MD5
e2bd5ae53427f193b42d64b8e9bf1943

SHA1
7c317aad8e2b24c08d3b8b3fba16dd537411727f

SHA256
c4844b05e3a936b130adedb854d3c04d49ee54edb43e9d36f8c4ae94ccb78400

SHA512
ae23a6707e539c619fd5c5b4fc6e4734edc91f89ebe024d25ff2a70168da6105ac0bd47cf6bf3715af6411963caf0acbb4632464e1619ca6361abf53adfe7036

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI15522\python311.dll

Filesize
5.5MB

MD5
e2bd5ae53427f193b42d64b8e9bf1943

SHA1
7c317aad8e2b24c08d3b8b3fba16dd537411727f

SHA256
c4844b05e3a936b130adedb854d3c04d49ee54edb43e9d36f8c4ae94ccb78400

SHA512
ae23a6707e539c619fd5c5b4fc6e4734edc91f89ebe024d25ff2a70168da6105ac0bd47cf6bf3715af6411963caf0acbb4632464e1619ca6361abf53adfe7036

Download Submit