fabcab6af74df95db82b9d13f517cf3724de822e3d93af43e4ae6289876d81b6

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
23/09/2023, 04:03

Target

dxjy/zip.exe
Size

7.8MB
MD5

18d7e8df99ec06f1162252205bb178d4
SHA1

4e66a9281998d7f984b3781bb5812c17778b8699
SHA256

a0ee4703b6780fcc740c8c5b202fe5c5df0cec023e4356a083141c854140e7ba
SHA512

a9ca9059103c092c1ba5acfc33acd33fc40e9b21fe08a5752c132adaa28ca8d19ec8be2daf95950fc9c8e615897dff843c668864e6c36d682be23e0ca3b2b803
SSDEEP

196608:uxv4EdkYx7QICteEroXxWVfEqlbkkwR7VTEJZFzs/yLsVH8vL:44DWQInEroXgfEqirRRoJZ5s/Isyv

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
2632	zip.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2016 wrote to memory of 2632	2016	zip.exe	29
PID 2016 wrote to memory of 2632	2016	zip.exe	29
PID 2016 wrote to memory of 2632	2016	zip.exe	29

C:\Users\Admin\AppData\Local\Temp\dxjy\zip.exe
"C:\Users\Admin\AppData\Local\Temp\dxjy\zip.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2016
- C:\Users\Admin\AppData\Local\Temp\dxjy\zip.exe
  "C:\Users\Admin\AppData\Local\Temp\dxjy\zip.exe"
  2⤵
  - Loads dropped DLL
  PID:2632

C:\Users\Admin\AppData\Local\Temp\_MEI20162\python39.dll

Filesize
4.3MB

MD5
7e9d14aa762a46bb5ebac14fbaeaa238

SHA1
a5d90a7df9b90bdd8a84d7dc5066e4ea64ceb3d9

SHA256
e456ef44b261f895a01efb52d26c7a0c7d7d465b647a7b5592708ebf693f12a3

SHA512
280f16348df1c0953bbc6f37ff277485351171d0545ebe469bacd106d907917f87584154aec0f193f37322bc93ac5433cd9a5b5c7f47367176e5a8b19bbd5023

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI20162\python39.dll

Filesize
4.3MB

MD5
7e9d14aa762a46bb5ebac14fbaeaa238

SHA1
a5d90a7df9b90bdd8a84d7dc5066e4ea64ceb3d9

SHA256
e456ef44b261f895a01efb52d26c7a0c7d7d465b647a7b5592708ebf693f12a3

SHA512
280f16348df1c0953bbc6f37ff277485351171d0545ebe469bacd106d907917f87584154aec0f193f37322bc93ac5433cd9a5b5c7f47367176e5a8b19bbd5023

Download Submit