a0e608801566feb6f2597aed98eed1ace8093bd1400e0172ce214d3c37fa8f2a

Resubmissions

27-10-2023 22:15

27-10-2023 22:11

max time kernel
118s
max time network
134s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
27-10-2023 22:15

Target

winlogonhelp.exe
Size

14.4MB
MD5

883659842ddff81d80972bbb9741f1c6
SHA1

816ef1e3b4bb2bcf09a287c8e782834edabf0e29
SHA256

a0e608801566feb6f2597aed98eed1ace8093bd1400e0172ce214d3c37fa8f2a
SHA512

378690f932c5fe12f059f70dc7abe6667da07f18b7ca18093b398b254a6921fe0f0a969d504b494e880cdaad11f839c8369e20b8a67d3420e0a7bacd0f3cddff
SSDEEP

393216:JiIE7YoPQbjdQuslSq99oWOv+9fgF9spY4Je:W7rPQ3dQuSDorvSYPsp9J

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
2616	winlogonhelp.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1800 wrote to memory of 2616	1800	winlogonhelp.exe	28
PID 1800 wrote to memory of 2616	1800	winlogonhelp.exe	28
PID 1800 wrote to memory of 2616	1800	winlogonhelp.exe	28

C:\Users\Admin\AppData\Local\Temp\winlogonhelp.exe
"C:\Users\Admin\AppData\Local\Temp\winlogonhelp.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1800
- C:\Users\Admin\AppData\Local\Temp\winlogonhelp.exe
  "C:\Users\Admin\AppData\Local\Temp\winlogonhelp.exe"
  2⤵
  - Loads dropped DLL
  PID:2616

C:\Users\Admin\AppData\Local\Temp\_MEI18002\python310.dll

Filesize
4.3MB

MD5
deaf0c0cc3369363b800d2e8e756a402

SHA1
3085778735dd8badad4e39df688139f4eed5f954

SHA256
156cf2b64dd0f4d9bdb346b654a11300d6e9e15a65ef69089923dafc1c71e33d

SHA512
5cac1d92af7ee18425b5ee8e7cd4e941a9ddffb4bc1c12bb8aeabeed09acec1ff0309abc41a2e0c8db101fee40724f8bfb27a78898128f8746c8fe01c1631989

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI18002\python310.dll

Filesize
4.3MB

MD5
deaf0c0cc3369363b800d2e8e756a402

SHA1
3085778735dd8badad4e39df688139f4eed5f954

SHA256
156cf2b64dd0f4d9bdb346b654a11300d6e9e15a65ef69089923dafc1c71e33d

SHA512
5cac1d92af7ee18425b5ee8e7cd4e941a9ddffb4bc1c12bb8aeabeed09acec1ff0309abc41a2e0c8db101fee40724f8bfb27a78898128f8746c8fe01c1631989

Download Submit