2097cfcef072f6b12370139d94a171073df2255807c01ad6d747f0d24a190aa6

Analysis

max time kernel
150s
max time network
119s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
12/06/2023, 09:57

Target

DriverToolkitInstaller.exe
Size

2.3MB
MD5

ade449592745b54724fa70ec488b99fd
SHA1

9aa32c2a67da99465f6b4c8c88cd52b109a243c4
SHA256

2097cfcef072f6b12370139d94a171073df2255807c01ad6d747f0d24a190aa6
SHA512

9675264caea44f30c035013f617591679b0802f8d7bc552b0091b944720db67ebc7ec3d1e9536ba7f13dcb07ef591d20e5c063de6e3979540c34d2b0963156ed
SSDEEP

49152:khg3LcSpYqQLyUf42fy6A4OeOqdAIjtYKmbaS/0GfVfcDi9r:JLcSpd8yEzvPlK1JODiN

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2044	DriverToolkitInstaller.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4628 wrote to memory of 2044	4628	DriverToolkitInstaller.exe	85
PID 4628 wrote to memory of 2044	4628	DriverToolkitInstaller.exe	85
PID 4628 wrote to memory of 2044	4628	DriverToolkitInstaller.exe	85

C:\Users\Admin\AppData\Local\Temp\DriverToolkitInstaller.exe
"C:\Users\Admin\AppData\Local\Temp\DriverToolkitInstaller.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4628
- C:\Users\Admin\AppData\Local\Temp\is-RUCG4.tmp\DriverToolkitInstaller.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-RUCG4.tmp\DriverToolkitInstaller.tmp" /SL5="$C0160,2034942,134144,C:\Users\Admin\AppData\Local\Temp\DriverToolkitInstaller.exe"
  2⤵
  - Executes dropped EXE
  PID:2044

C:\Users\Admin\AppData\Local\Temp\is-RUCG4.tmp\DriverToolkitInstaller.tmp

Filesize
1.1MB

MD5
4fec953b2903ca1dc503a08db5dfd8b7

SHA1
4d1ae35ce801b19abe2ffa48c972a6c416b92644

SHA256
25a03caed8ced6b4aff82ac86106bf1401f6c780c7719d821e8b44c2b7496680

SHA512
1baf114e41190c4acf436d39ae3db424f9fafb64a0219a580a33f70f5c24e117710830f29a6c2b06c977055644d764c83820e55d49c8d49d0a894e6ab133a85a

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-RUCG4.tmp\DriverToolkitInstaller.tmp

Filesize
1.1MB

MD5
4fec953b2903ca1dc503a08db5dfd8b7

SHA1
4d1ae35ce801b19abe2ffa48c972a6c416b92644

SHA256
25a03caed8ced6b4aff82ac86106bf1401f6c780c7719d821e8b44c2b7496680

SHA512
1baf114e41190c4acf436d39ae3db424f9fafb64a0219a580a33f70f5c24e117710830f29a6c2b06c977055644d764c83820e55d49c8d49d0a894e6ab133a85a

Download Submit
memory/2044-143-0x0000000002400000-0x0000000002401000-memory.dmp

Filesize
4KB

Download
memory/2044-145-0x0000000000400000-0x000000000052E000-memory.dmp

Filesize
1.2MB

Download
memory/4628-133-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/4628-144-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download