a76216049cbe6154855a8bdec8c3a3d267cd367e3bebffffc367218c8aeabaae

Analysis

max time kernel
28s
max time network
31s
platform
windows7_x64
resource
win7-20230621-en
resource tags

arch:x64arch:x86image:win7-20230621-enlocale:en-usos:windows7-x64system
submitted
29/06/2023, 14:27

Target
tenki.exe
Size 6.7MB
Sample230629-rseq6adc73
SHA256 a76216049cbe6154855a8bdec8c3a3d267cd367e3bebffffc367218c8aeabaae
MD5 84ae3b1643c4d9c252533524a3170903
SHA1 7bb78cf0f5a4d88766534d62236832a3f64e3ae0
SHA512 ae6f5159a142dcc70408959d1f0c96e778cf96084f13a00339e29b348dff0d96eb0577cf52cdd7bbc9e058ef0dcd74f5e3dbbdeb7d536d33a0365c286649f33f
SSDEEP 98304:M+zTX4Pf1N2zIh3ET9Y9MxVMOPUh3PdWPEUrJY6AOxbHPS2zh/hQqfvsJ1YPwIu/:MAX4FMIZETKwjPePdrQJ/BNOqAYPL
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
1640	tenki.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1704 wrote to memory of 1640	1704	tenki.exe	27
PID 1704 wrote to memory of 1640	1704	tenki.exe	27
PID 1704 wrote to memory of 1640	1704	tenki.exe	27

C:\Users\Admin\AppData\Local\Temp\tenki.exe
"C:\Users\Admin\AppData\Local\Temp\tenki.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1704
- C:\Users\Admin\AppData\Local\Temp\tenki.exe
  "C:\Users\Admin\AppData\Local\Temp\tenki.exe"
  2⤵
  - Loads dropped DLL
  PID:1640

python311.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI17042\python311.dll
Size 5.5MB
SHA256 a811c7516f531f1515d10743ae78004dd627eba0dc2d3bc0d2e033b2722043ce
MD5 5a5dd7cad8028097842b0afef45bfbcf
SHA1 e247a2e460687c607253949c52ae2801ff35dc4a
SHA512 e6268e4fad2ce3ef16b68298a57498e16f0262bf3531539ad013a66f72df471569f94c6fcc48154b7c3049a3ad15cbfcbb6345dacb4f4ed7d528c74d589c9858
SSDEEP 49152:73djosVvASxQKADxYBVD0NErnKqroleDkcWE/Q3pPITbwVFZL7VgVr42I1vJHH++:73ZOKRtlrJ7wfGrs1BHeM+2PocL2
MD5 SHA1 SHA512 SSDEEP

Submit Download

python311.dll

Path \Users\Admin\AppData\Local\Temp\_MEI17042\python311.dll
Size 5.5MB
SHA256 a811c7516f531f1515d10743ae78004dd627eba0dc2d3bc0d2e033b2722043ce
MD5 5a5dd7cad8028097842b0afef45bfbcf
SHA1 e247a2e460687c607253949c52ae2801ff35dc4a
SHA512 e6268e4fad2ce3ef16b68298a57498e16f0262bf3531539ad013a66f72df471569f94c6fcc48154b7c3049a3ad15cbfcbb6345dacb4f4ed7d528c74d589c9858
SSDEEP 49152:73djosVvASxQKADxYBVD0NErnKqroleDkcWE/Q3pPITbwVFZL7VgVr42I1vJHH++:73ZOKRtlrJ7wfGrs1BHeM+2PocL2
MD5 SHA1 SHA512 SSDEEP

Submit Download