7410552899317b9fd9c0654e6ca7557bada2c5464dece5e5a7968cd363365f75

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
19-10-2023 18:48

Target

Artic Exectuor V2.exe
Size

14.4MB
MD5

36fbebafd42a69db1f42217c2a7a61d1
SHA1

22a635c079339347fdc0cc26c2a9095e421a7bd4
SHA256

7410552899317b9fd9c0654e6ca7557bada2c5464dece5e5a7968cd363365f75
SHA512

9060a99af0d7ed1397fb05e4417ae3ddf3b49e3aa599a3fd60981c62d017eed7351458b9fa1615cd9daec3acf0b9298e1237ecb56b1c7cd4b59d5a404e99f0f6
SSDEEP

393216:Bu7L/sQdkndQuslSq99oWOv+9fgf87eeqG:BCL0QdkndQuSDorvSYfmbq

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
2472	Artic Exectuor V2.exe

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: 33	2160	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	2160	AUDIODG.EXE
Token: 33	2160	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	2160	AUDIODG.EXE

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2232 wrote to memory of 2472	2232	Artic Exectuor V2.exe	28
PID 2232 wrote to memory of 2472	2232	Artic Exectuor V2.exe	28
PID 2232 wrote to memory of 2472	2232	Artic Exectuor V2.exe	28

C:\Users\Admin\AppData\Local\Temp\Artic Exectuor V2.exe
"C:\Users\Admin\AppData\Local\Temp\Artic Exectuor V2.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2232
- C:\Users\Admin\AppData\Local\Temp\Artic Exectuor V2.exe
  "C:\Users\Admin\AppData\Local\Temp\Artic Exectuor V2.exe"
  2⤵
  - Loads dropped DLL
  PID:2472

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x4fc
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2160

C:\Users\Admin\AppData\Local\Temp\_MEI22322\python310.dll

Filesize
4.3MB

MD5
deaf0c0cc3369363b800d2e8e756a402

SHA1
3085778735dd8badad4e39df688139f4eed5f954

SHA256
156cf2b64dd0f4d9bdb346b654a11300d6e9e15a65ef69089923dafc1c71e33d

SHA512
5cac1d92af7ee18425b5ee8e7cd4e941a9ddffb4bc1c12bb8aeabeed09acec1ff0309abc41a2e0c8db101fee40724f8bfb27a78898128f8746c8fe01c1631989

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI22322\python310.dll

Filesize
4.3MB

MD5
deaf0c0cc3369363b800d2e8e756a402

SHA1
3085778735dd8badad4e39df688139f4eed5f954

SHA256
156cf2b64dd0f4d9bdb346b654a11300d6e9e15a65ef69089923dafc1c71e33d

SHA512
5cac1d92af7ee18425b5ee8e7cd4e941a9ddffb4bc1c12bb8aeabeed09acec1ff0309abc41a2e0c8db101fee40724f8bfb27a78898128f8746c8fe01c1631989

Download Submit