8c02638647869e6d2b6e3d26fd22c050fd63f8eb565925357901094d703f2892

Analysis

max time kernel
117s
max time network
130s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
11-10-2023 23:35

Target

Image-logger-application.exe
Size

15.6MB
MD5

2fa6e9c789f60d5069a6d3faecae5663
SHA1

946b3a84ff707490315001caeb7db63df06e9df6
SHA256

8c02638647869e6d2b6e3d26fd22c050fd63f8eb565925357901094d703f2892
SHA512

c07165171a27542ceed5bd3fcf33634a916d0b5cbaa6b8cca5d68bbe4d23cac59892fcaa28ab10e53492e4dfb116b7da0f29482b541acc6227bc863373fb23a4
SSDEEP

393216:wJz7B2D4RqKQETSrvJPLOqH8no7FdCH3T7:ufQD4sKQEWrhRdsT

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
328	Image-logger-application.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2760 wrote to memory of 328	2760	Image-logger-application.exe	29
PID 2760 wrote to memory of 328	2760	Image-logger-application.exe	29
PID 2760 wrote to memory of 328	2760	Image-logger-application.exe	29

C:\Users\Admin\AppData\Local\Temp\Image-logger-application.exe
"C:\Users\Admin\AppData\Local\Temp\Image-logger-application.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2760
- C:\Users\Admin\AppData\Local\Temp\Image-logger-application.exe
  "C:\Users\Admin\AppData\Local\Temp\Image-logger-application.exe"
  2⤵
  - Loads dropped DLL
  PID:328

C:\Users\Admin\AppData\Local\Temp\_MEI27602\python311.dll

Filesize
5.5MB

MD5
5a5dd7cad8028097842b0afef45bfbcf

SHA1
e247a2e460687c607253949c52ae2801ff35dc4a

SHA256
a811c7516f531f1515d10743ae78004dd627eba0dc2d3bc0d2e033b2722043ce

SHA512
e6268e4fad2ce3ef16b68298a57498e16f0262bf3531539ad013a66f72df471569f94c6fcc48154b7c3049a3ad15cbfcbb6345dacb4f4ed7d528c74d589c9858

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI27602\python311.dll

Filesize
5.5MB

MD5
5a5dd7cad8028097842b0afef45bfbcf

SHA1
e247a2e460687c607253949c52ae2801ff35dc4a

SHA256
a811c7516f531f1515d10743ae78004dd627eba0dc2d3bc0d2e033b2722043ce

SHA512
e6268e4fad2ce3ef16b68298a57498e16f0262bf3531539ad013a66f72df471569f94c6fcc48154b7c3049a3ad15cbfcbb6345dacb4f4ed7d528c74d589c9858

Download Submit