a1539f9996c040b18c34983d48b80a3592f00c93ab5a279bf015999cf1796e1b

Resubmissions

23/08/2023, 20:07

max time kernel
14s
max time network
18s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
23/08/2023, 20:07

Target

ORIONX FUD CRYPTER.exe
Size

9.6MB
MD5

af452c108fee8530119d2534722238dd
SHA1

3d40eb00f9a455f5550a1b3ddd60c8dd09b13244
SHA256

a1539f9996c040b18c34983d48b80a3592f00c93ab5a279bf015999cf1796e1b
SHA512

fb12422ab74300c6874689659136da2655f02f2200a9de92d343e79ce1dd43f6d9277544d73d21066696fedb3be6b0407264979fefc75763f2d279a2655b486e
SSDEEP

196608:hFCY0yk+DfyGZ21X5Sp6GemDMPwSaw2cgWg1bMe0W8/LaNrruuWC:TCY0yxDfD0pfaMPXaw2a5W80ui

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
1324	ORIONX FUD CRYPTER.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2220 wrote to memory of 1324	2220	ORIONX FUD CRYPTER.exe	30
PID 2220 wrote to memory of 1324	2220	ORIONX FUD CRYPTER.exe	30
PID 2220 wrote to memory of 1324	2220	ORIONX FUD CRYPTER.exe	30

C:\Users\Admin\AppData\Local\Temp\ORIONX FUD CRYPTER.exe
"C:\Users\Admin\AppData\Local\Temp\ORIONX FUD CRYPTER.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2220
- C:\Users\Admin\AppData\Local\Temp\ORIONX FUD CRYPTER.exe
  "C:\Users\Admin\AppData\Local\Temp\ORIONX FUD CRYPTER.exe"
  2⤵
  - Loads dropped DLL
  PID:1324

C:\Users\Admin\AppData\Local\Temp\_MEI22202\python311.dll

Filesize
5.5MB

MD5
e2bd5ae53427f193b42d64b8e9bf1943

SHA1
7c317aad8e2b24c08d3b8b3fba16dd537411727f

SHA256
c4844b05e3a936b130adedb854d3c04d49ee54edb43e9d36f8c4ae94ccb78400

SHA512
ae23a6707e539c619fd5c5b4fc6e4734edc91f89ebe024d25ff2a70168da6105ac0bd47cf6bf3715af6411963caf0acbb4632464e1619ca6361abf53adfe7036

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI22202\python311.dll

Filesize
5.5MB

MD5
e2bd5ae53427f193b42d64b8e9bf1943

SHA1
7c317aad8e2b24c08d3b8b3fba16dd537411727f

SHA256
c4844b05e3a936b130adedb854d3c04d49ee54edb43e9d36f8c4ae94ccb78400

SHA512
ae23a6707e539c619fd5c5b4fc6e4734edc91f89ebe024d25ff2a70168da6105ac0bd47cf6bf3715af6411963caf0acbb4632464e1619ca6361abf53adfe7036

Download Submit