b38ab3b0242fdc7e0303f2f1511322344f2f4d342dc7f5a61147c00dfdbc408b

Analysis

max time kernel
120s
max time network
127s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
05-08-2023 09:08

Target

7X/UTNL9P7TICJ.exe
Size

10.1MB
MD5

a166f68bed48f5795052877385d5108b
SHA1

52f31c677175738ff0a9511ca0cdc1cbad475c47
SHA256

afbb63f1ca2ef72ee79890a99fa695115323b87937d45b1b4c860c743c6fd83f
SHA512

a8f0c477374366062d78eda1cd727d8844878ea7185c2299903b3b75c13998cec1644c14bb9e4b0e321057b9a0f6390c6a68a19d59c79d7330661a7022e0f30a
SSDEEP

196608:KvDna+butR4FMIZETSt3jPePdrQJ2BNOq62gAqYPYgUFHN:6DnaOyRQETSBvJSOq62YHtFHN

Score

7^/10

Loads dropped DLL 1 IoCs

Processes:

UTNL9P7TICJ.exe

pid process

2696 UTNL9P7TICJ.exe

pid	process
2696	UTNL9P7TICJ.exe

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

UTNL9P7TICJ.exe

description	pid	process	target process
PID 1876 wrote to memory of 2696	1876	UTNL9P7TICJ.exe	UTNL9P7TICJ.exe
PID 1876 wrote to memory of 2696	1876	UTNL9P7TICJ.exe	UTNL9P7TICJ.exe
PID 1876 wrote to memory of 2696	1876	UTNL9P7TICJ.exe	UTNL9P7TICJ.exe

C:\Users\Admin\AppData\Local\Temp\7X\UTNL9P7TICJ.exe
"C:\Users\Admin\AppData\Local\Temp\7X\UTNL9P7TICJ.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1876

C:\Users\Admin\AppData\Local\Temp\7X\UTNL9P7TICJ.exe
"C:\Users\Admin\AppData\Local\Temp\7X\UTNL9P7TICJ.exe"
2⤵
- Loads dropped DLL
PID:2696

C:\Users\Admin\AppData\Local\Temp\_MEI18762\python311.dll
Filesize
5.5MB

MD5
5a5dd7cad8028097842b0afef45bfbcf

SHA1
e247a2e460687c607253949c52ae2801ff35dc4a

SHA256
a811c7516f531f1515d10743ae78004dd627eba0dc2d3bc0d2e033b2722043ce

SHA512
e6268e4fad2ce3ef16b68298a57498e16f0262bf3531539ad013a66f72df471569f94c6fcc48154b7c3049a3ad15cbfcbb6345dacb4f4ed7d528c74d589c9858

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI18762\python311.dll
Filesize
5.5MB

MD5
5a5dd7cad8028097842b0afef45bfbcf

SHA1
e247a2e460687c607253949c52ae2801ff35dc4a

SHA256
a811c7516f531f1515d10743ae78004dd627eba0dc2d3bc0d2e033b2722043ce

SHA512
e6268e4fad2ce3ef16b68298a57498e16f0262bf3531539ad013a66f72df471569f94c6fcc48154b7c3049a3ad15cbfcbb6345dacb4f4ed7d528c74d589c9858

Download Submit