57316e29bbf6391f28d0c11c78b61607b9b1a4e87fb3adbb1855b8773223f0e1

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
27-10-2023 03:49

Target

HipsMain.exe
Size

9.0MB
MD5

4eca89b96ba84a68348f85b3a9dc03b7
SHA1

a1fd3e9093d8153b15fc1102f35c745b375ce9dc
SHA256

8df72d49778de3cc2ba9c31299f7f4a0a0a144ea4826a51b1de75d037ba2a7f7
SHA512

6170c930d76c9aca6ee9a6b4816b829677c7b303a20afc62e38fe675c7acd1e1fb8dca756c4ed44106fa1f37a99e05ebd271f78b7edddf238a3a15effd78ec32
SSDEEP

196608:ohPrc50mr2puHUHNTqICteEroXx8axG6NIyzlu8pgUN0Mi8mENps:OcKmr2pu0tTqInEroXOakuIyzlu8pja4

Score

7^/10

Loads dropped DLL 1 IoCs

Processes:

HipsMain.exe

pid process

2720 HipsMain.exe

pid	process
2720	HipsMain.exe

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

HipsMain.exe

description	pid	process	target process
PID 2872 wrote to memory of 2720	2872	HipsMain.exe	HipsMain.exe
PID 2872 wrote to memory of 2720	2872	HipsMain.exe	HipsMain.exe
PID 2872 wrote to memory of 2720	2872	HipsMain.exe	HipsMain.exe

C:\Users\Admin\AppData\Local\Temp\HipsMain.exe
"C:\Users\Admin\AppData\Local\Temp\HipsMain.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2872

C:\Users\Admin\AppData\Local\Temp\HipsMain.exe
"C:\Users\Admin\AppData\Local\Temp\HipsMain.exe"
2⤵
- Loads dropped DLL
PID:2720

C:\Users\Admin\AppData\Local\Temp\_MEI28722\python39.dll
Filesize
4.3MB

MD5
0c74e7172e79148d2c995951cb828fa1

SHA1
6e46616de50a7871668b2e6a22895b9c594d232a

SHA256
3937d1865f5a6f9ba892705bbe75352defc7b083b61894a4bdb6adefe0c2b39d

SHA512
bbca4b2c6338f0d4274c5db371cae075834677844e457280d8d9f2c5ba74b3a9a159aeb978cf3fa4983d2efda62cbc2c9570d56e4a9682324f7fc7c2788ede86

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI28722\python39.dll
Filesize
4.3MB

MD5
0c74e7172e79148d2c995951cb828fa1

SHA1
6e46616de50a7871668b2e6a22895b9c594d232a

SHA256
3937d1865f5a6f9ba892705bbe75352defc7b083b61894a4bdb6adefe0c2b39d

SHA512
bbca4b2c6338f0d4274c5db371cae075834677844e457280d8d9f2c5ba74b3a9a159aeb978cf3fa4983d2efda62cbc2c9570d56e4a9682324f7fc7c2788ede86

Download Submit