b38ab3b0242fdc7e0303f2f1511322344f2f4d342dc7f5a61147c00dfdbc408b

Analysis

max time kernel
120s
max time network
127s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
05-08-2023 09:08

Target

7X/om6osj7p9.exe
Size

10.1MB
MD5

60e4584ef6e476cb4913ff10b4407163
SHA1

18e657cf23af9c0cddb91f87375d4e67ac5f972d
SHA256

62af63c631b2f5a4d25ede64b783a0059d7b81aa17af33fb9bac7c758c91b46e
SHA512

ebe6189915dc76d9ed2c0640d37c8f8f237fd3a9277b54a6d5ada9ab0013e89674872270203e49fb735334f5763d380bf78a9ef709892e21aa8055188b121185
SSDEEP

196608:f3Dna+butR4FMIZETSt3jPePdrQJ2BNOq62gAqYPYgUFHN:vDnaOyRQETSBvJSOq62YHtFHN

Score

7^/10

Loads dropped DLL 1 IoCs

Processes:

om6osj7p9.exe

pid process

2976 om6osj7p9.exe

pid	process
2976	om6osj7p9.exe

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

om6osj7p9.exe

description	pid	process	target process
PID 1944 wrote to memory of 2976	1944	om6osj7p9.exe	om6osj7p9.exe
PID 1944 wrote to memory of 2976	1944	om6osj7p9.exe	om6osj7p9.exe
PID 1944 wrote to memory of 2976	1944	om6osj7p9.exe	om6osj7p9.exe

C:\Users\Admin\AppData\Local\Temp\7X\om6osj7p9.exe
"C:\Users\Admin\AppData\Local\Temp\7X\om6osj7p9.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1944

C:\Users\Admin\AppData\Local\Temp\7X\om6osj7p9.exe
"C:\Users\Admin\AppData\Local\Temp\7X\om6osj7p9.exe"
2⤵
- Loads dropped DLL
PID:2976

C:\Users\Admin\AppData\Local\Temp\_MEI19442\python311.dll
Filesize
5.5MB

MD5
5a5dd7cad8028097842b0afef45bfbcf

SHA1
e247a2e460687c607253949c52ae2801ff35dc4a

SHA256
a811c7516f531f1515d10743ae78004dd627eba0dc2d3bc0d2e033b2722043ce

SHA512
e6268e4fad2ce3ef16b68298a57498e16f0262bf3531539ad013a66f72df471569f94c6fcc48154b7c3049a3ad15cbfcbb6345dacb4f4ed7d528c74d589c9858

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI19442\python311.dll
Filesize
5.5MB

MD5
5a5dd7cad8028097842b0afef45bfbcf

SHA1
e247a2e460687c607253949c52ae2801ff35dc4a

SHA256
a811c7516f531f1515d10743ae78004dd627eba0dc2d3bc0d2e033b2722043ce

SHA512
e6268e4fad2ce3ef16b68298a57498e16f0262bf3531539ad013a66f72df471569f94c6fcc48154b7c3049a3ad15cbfcbb6345dacb4f4ed7d528c74d589c9858

Download Submit