bab718975278b881b632c4359f90f93185302a79935f0be578f212ab4e7c3d6a

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
23/08/2023, 23:31

Target

VoiceAI-was-rar.zip
Size

18.8MB
MD5

57cf1f2f4a758142c0b469f83141b499
SHA1

cb5bdfd3eace4bbee04d0f6f51a43010620050ae
SHA256

bab718975278b881b632c4359f90f93185302a79935f0be578f212ab4e7c3d6a
SHA512

0c6f49300cda56cb4eed89845c653a5832d3e71bbc422ddcdf3d8be0ccfc200bde227af76164b3c71edef005d400244a6117a4e3ff61fe1ce4795c8edcbfc21c
SSDEEP

393216:sEUmlE5zSteK210N1QRiZrpjP0n+feQ0F1i/zStey0uR6/wER:s/8UjuIiBZ0nh14/z60u63R

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
1600	VoiceAiSetup.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1192 wrote to memory of 1600	1192	VoiceAiSetup.exe	35
PID 1192 wrote to memory of 1600	1192	VoiceAiSetup.exe	35
PID 1192 wrote to memory of 1600	1192	VoiceAiSetup.exe	35

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\VoiceAI-was-rar.zip
1⤵
PID:3012

C:\Users\Admin\Documents\VoiceAI-was-rar\VoiceAiSetup.exe
"C:\Users\Admin\Documents\VoiceAI-was-rar\VoiceAiSetup.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1192
- C:\Users\Admin\Documents\VoiceAI-was-rar\VoiceAiSetup.exe
  "C:\Users\Admin\Documents\VoiceAI-was-rar\VoiceAiSetup.exe"
  2⤵
  - Loads dropped DLL
  PID:1600

C:\Users\Admin\AppData\Local\Temp\_MEI11922\python311.dll

Filesize
5.5MB

MD5
e2bd5ae53427f193b42d64b8e9bf1943

SHA1
7c317aad8e2b24c08d3b8b3fba16dd537411727f

SHA256
c4844b05e3a936b130adedb854d3c04d49ee54edb43e9d36f8c4ae94ccb78400

SHA512
ae23a6707e539c619fd5c5b4fc6e4734edc91f89ebe024d25ff2a70168da6105ac0bd47cf6bf3715af6411963caf0acbb4632464e1619ca6361abf53adfe7036

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI11922\python311.dll

Filesize
5.5MB

MD5
e2bd5ae53427f193b42d64b8e9bf1943

SHA1
7c317aad8e2b24c08d3b8b3fba16dd537411727f

SHA256
c4844b05e3a936b130adedb854d3c04d49ee54edb43e9d36f8c4ae94ccb78400

SHA512
ae23a6707e539c619fd5c5b4fc6e4734edc91f89ebe024d25ff2a70168da6105ac0bd47cf6bf3715af6411963caf0acbb4632464e1619ca6361abf53adfe7036

Download Submit