757bb11784dae24a20399573bba682551f7d67b8032bc0b2e467da87d05d8cf8

Analysis

max time kernel
143s
max time network
34s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
14/06/2023, 06:46

Target

setup_52_v1.1.5.exe
Size

102.8MB
MD5

b81456ac7c7fd6519b69b01dacc0d415
SHA1

deca5be3d019f69734424990ffaa76768f0e9681
SHA256

757bb11784dae24a20399573bba682551f7d67b8032bc0b2e467da87d05d8cf8
SHA512

6d223c68a5b15fa9cb0c8c40a3d353815fc26ac89769e490253567f659dd26b17d3fe801dd9d180cf846421f4c76795264e3f657d49c343630134ba0a430354d
SSDEEP

1572864:CTE4iRuSikjjXYazEPjBXlnbA+R3mAfHlG6aGGyXrU6SJ9RV6Ykpbb0xYl5rY8tI:CTqRtjI8ijBXX3mMQSSv6Yy0CrYWQnTH

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
1956	setup_52_v1.1.5.tmp

Loads dropped DLL 1 IoCs

pid	Process
1992	setup_52_v1.1.5.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1956	setup_52_v1.1.5.tmp

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1992 wrote to memory of 1956	1992	setup_52_v1.1.5.exe	27
PID 1992 wrote to memory of 1956	1992	setup_52_v1.1.5.exe	27
PID 1992 wrote to memory of 1956	1992	setup_52_v1.1.5.exe	27
PID 1992 wrote to memory of 1956	1992	setup_52_v1.1.5.exe	27
PID 1992 wrote to memory of 1956	1992	setup_52_v1.1.5.exe	27
PID 1992 wrote to memory of 1956	1992	setup_52_v1.1.5.exe	27
PID 1992 wrote to memory of 1956	1992	setup_52_v1.1.5.exe	27

C:\Users\Admin\AppData\Local\Temp\is-0UB6V.tmp\setup_52_v1.1.5.tmp

Filesize
2.4MB

MD5
8e2d270339dcd0a68fbb2f02a65d45dd

SHA1
bfcdb1f71692020858f96960e432e94a4e70c4a4

SHA256
506176b3245de84bb0b7a4da4b8068b9dd289eb9a3a1757d4183c7c3f168c811

SHA512
31eac8aabe8ac83f24d4eba21bc3a52b56105f52402aeb00e505a6be3208cf92cc57529b26f1b29605f554dccdff51e9f28f584268bfda689f53be624f3fd647

Download Submit
\Users\Admin\AppData\Local\Temp\is-0UB6V.tmp\setup_52_v1.1.5.tmp

Filesize
2.4MB

MD5
8e2d270339dcd0a68fbb2f02a65d45dd

SHA1
bfcdb1f71692020858f96960e432e94a4e70c4a4

SHA256
506176b3245de84bb0b7a4da4b8068b9dd289eb9a3a1757d4183c7c3f168c811

SHA512
31eac8aabe8ac83f24d4eba21bc3a52b56105f52402aeb00e505a6be3208cf92cc57529b26f1b29605f554dccdff51e9f28f584268bfda689f53be624f3fd647

Download Submit
memory/1956-62-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/1956-64-0x0000000000400000-0x0000000000679000-memory.dmp

Filesize
2.5MB

Download
memory/1956-65-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/1992-54-0x0000000000400000-0x00000000004BE000-memory.dmp

Filesize
760KB

Download
memory/1992-63-0x0000000000400000-0x00000000004BE000-memory.dmp

Filesize
760KB

Download