deae936c8c8e6deb9af3e7a63102ba3a4452fbfb6ba0a66f9b3d738d1666adba

Analysis

max time kernel
118s
max time network
130s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
12-10-2023 10:56

Target

PolyCode.exe
Size

20.4MB
MD5

8146fca1182d7f5d8e38ffd5c5c46d55
SHA1

46bc35a68538f83d5b91a46c5ea27149a811e8eb
SHA256

deae936c8c8e6deb9af3e7a63102ba3a4452fbfb6ba0a66f9b3d738d1666adba
SHA512

47319feac5b341b39c32425c3238aa0cebe77cc6d6d0882527e246d05e11f121af75c39169cb9c48c8e193992ad770ea2426a4c430cdd9554d81c4918c8d014e
SSDEEP

393216:OwY2pMr7M5li8DfDu/m3pKMpfaMPjRMR8atzdKJd/Z:OwY2g7M5l3biKKuf9Pj6Rnq

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
1436	PolyCode.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2224 wrote to memory of 1436	2224	PolyCode.exe	28
PID 2224 wrote to memory of 1436	2224	PolyCode.exe	28
PID 2224 wrote to memory of 1436	2224	PolyCode.exe	28

C:\Users\Admin\AppData\Local\Temp\PolyCode.exe
"C:\Users\Admin\AppData\Local\Temp\PolyCode.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2224
- C:\Users\Admin\AppData\Local\Temp\PolyCode.exe
  "C:\Users\Admin\AppData\Local\Temp\PolyCode.exe"
  2⤵
  - Loads dropped DLL
  PID:1436

C:\Users\Admin\AppData\Local\Temp\_MEI22242\python311.dll

Filesize
5.5MB

MD5
e2bd5ae53427f193b42d64b8e9bf1943

SHA1
7c317aad8e2b24c08d3b8b3fba16dd537411727f

SHA256
c4844b05e3a936b130adedb854d3c04d49ee54edb43e9d36f8c4ae94ccb78400

SHA512
ae23a6707e539c619fd5c5b4fc6e4734edc91f89ebe024d25ff2a70168da6105ac0bd47cf6bf3715af6411963caf0acbb4632464e1619ca6361abf53adfe7036

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI22242\python311.dll

Filesize
5.5MB

MD5
e2bd5ae53427f193b42d64b8e9bf1943

SHA1
7c317aad8e2b24c08d3b8b3fba16dd537411727f

SHA256
c4844b05e3a936b130adedb854d3c04d49ee54edb43e9d36f8c4ae94ccb78400

SHA512
ae23a6707e539c619fd5c5b4fc6e4734edc91f89ebe024d25ff2a70168da6105ac0bd47cf6bf3715af6411963caf0acbb4632464e1619ca6361abf53adfe7036

Download Submit