bc9b8cf8152e01d5bb605de7219cb6713b0201931c53dd9a0011dfce13b030d2

Resubmissions

21/08/2023, 16:18

21/08/2023, 16:16

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
21/08/2023, 16:18

Target

Monocypher_AEAD_explorer.exe
Size

6.7MB
MD5

aecfc65a79d33a1b8624f53206c38978
SHA1

0754262ac951f9a0db82b13b2d9f26caee5ed11b
SHA256

a14ceeea285ea58a8d02fb14611238c1ee2299fd1e0971bf5305f24a6189f5fd
SHA512

3e295ac262326c5cb6452f0a0e918f4becf0c0ff55cfc3a9167662febed4733b75cfe9c2fe50691ac43baf2834371e84b72971f11ddc3bb894e666bae2029c2f
SSDEEP

196608:kZNoqdQmRrdA6lfuErSEEJwdF6ZtYPQki:Q9dQOlf+9JZtt

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
2472	Monocypher_AEAD_explorer.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1580 wrote to memory of 2472	1580	Monocypher_AEAD_explorer.exe	29
PID 1580 wrote to memory of 2472	1580	Monocypher_AEAD_explorer.exe	29
PID 1580 wrote to memory of 2472	1580	Monocypher_AEAD_explorer.exe	29

C:\Users\Admin\AppData\Local\Temp\Monocypher_AEAD_explorer.exe
"C:\Users\Admin\AppData\Local\Temp\Monocypher_AEAD_explorer.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1580
- C:\Users\Admin\AppData\Local\Temp\Monocypher_AEAD_explorer.exe
  "C:\Users\Admin\AppData\Local\Temp\Monocypher_AEAD_explorer.exe"
  2⤵
  - Loads dropped DLL
  PID:2472

C:\Users\Admin\AppData\Local\Temp\_MEI15802\python311.dll

Filesize
5.5MB

MD5
a72993488cecd88b3e19487d646f88f6

SHA1
5d359f4121e0be04a483f9ad1d8203ffc958f9a0

SHA256
aa1e959dcff75a343b448a797d8a5a041eb03b27565a30f70fd081df7a285038

SHA512
c895176784b9ac89c9b996c02ec0d0a3f7cd6ebf653a277c20dec104da6a11db084c53dd47c7b6653a448d877ad8e5e79c27db4ea6365ebb8ca2a78aa9c61b38

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI15802\python311.dll

Filesize
5.5MB

MD5
a72993488cecd88b3e19487d646f88f6

SHA1
5d359f4121e0be04a483f9ad1d8203ffc958f9a0

SHA256
aa1e959dcff75a343b448a797d8a5a041eb03b27565a30f70fd081df7a285038

SHA512
c895176784b9ac89c9b996c02ec0d0a3f7cd6ebf653a277c20dec104da6a11db084c53dd47c7b6653a448d877ad8e5e79c27db4ea6365ebb8ca2a78aa9c61b38

Download Submit