ac939deb44cbd4cb77fe9b85fab140422ea9c96320e688515d7238939b718ee9

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231025-en
resource tags

arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system
submitted
06-11-2023 03:42

Target

fenetre.exe
Size

13.5MB
MD5

d51d33eb0f0c0ecc8ec735f47e49c6bd
SHA1

37142899c322e98acee5ac5a4a84a669e8e3b22b
SHA256

ac939deb44cbd4cb77fe9b85fab140422ea9c96320e688515d7238939b718ee9
SHA512

a16de8e567f1e3dc564ec06fbcb0d3284b97ca289ed7144bfd31d9710d75a9127148a1a137b232d8627258ffd0905e7e47dba7ca5215d707f3a9a6374ba03628
SSDEEP

196608:uEoh5dQmR5dA6lsuErSEEJw/aq2c8Ft1L4iNxoFhnfQQJYS30W8/La9U4GmSlWX:fEdQ2ls+9Joaq2h4owBfQQehW83Qg

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
1824	fenetre.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2944 wrote to memory of 1824	2944	fenetre.exe	29
PID 2944 wrote to memory of 1824	2944	fenetre.exe	29
PID 2944 wrote to memory of 1824	2944	fenetre.exe	29

C:\Users\Admin\AppData\Local\Temp\fenetre.exe
"C:\Users\Admin\AppData\Local\Temp\fenetre.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2944
- C:\Users\Admin\AppData\Local\Temp\fenetre.exe
  "C:\Users\Admin\AppData\Local\Temp\fenetre.exe"
  2⤵
  - Loads dropped DLL
  PID:1824

C:\Users\Admin\AppData\Local\Temp\_MEI29442\python311.dll

Filesize
5.5MB

MD5
a72993488cecd88b3e19487d646f88f6

SHA1
5d359f4121e0be04a483f9ad1d8203ffc958f9a0

SHA256
aa1e959dcff75a343b448a797d8a5a041eb03b27565a30f70fd081df7a285038

SHA512
c895176784b9ac89c9b996c02ec0d0a3f7cd6ebf653a277c20dec104da6a11db084c53dd47c7b6653a448d877ad8e5e79c27db4ea6365ebb8ca2a78aa9c61b38

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI29442\python311.dll

Filesize
5.5MB

MD5
a72993488cecd88b3e19487d646f88f6

SHA1
5d359f4121e0be04a483f9ad1d8203ffc958f9a0

SHA256
aa1e959dcff75a343b448a797d8a5a041eb03b27565a30f70fd081df7a285038

SHA512
c895176784b9ac89c9b996c02ec0d0a3f7cd6ebf653a277c20dec104da6a11db084c53dd47c7b6653a448d877ad8e5e79c27db4ea6365ebb8ca2a78aa9c61b38

Download Submit