bfdba18907857055fd1ec903098f8f7ed3514e13494ebde944704907b64179fb

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
23/11/2023, 03:26

Target

VoiceAi_Setup.exe
Size

27.4MB
MD5

a87d0463e71627b972210ad64ed3414d
SHA1

cf9eff7d77c2bdf26f9506c69fedec6ab0319844
SHA256

bfdba18907857055fd1ec903098f8f7ed3514e13494ebde944704907b64179fb
SHA512

e76269a6b2688b7d4e46ca5d74040e41ad1048f3019e25eeb63247a3ba7db4ea33b86625ea1f57936b7a5f7bfddd343ee7564709ce10154782167eabb072b7f5
SSDEEP

786432:yMLFY30bO/f9Pj2j4N5dFU+TfgevMKHWEZYHW89r+:XY30bOHFj2kZFBTg6MKHWEOHWur+

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
2060	VoiceAi_Setup.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2060	VoiceAi_Setup.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2652 wrote to memory of 2060	2652	VoiceAi_Setup.exe	28
PID 2652 wrote to memory of 2060	2652	VoiceAi_Setup.exe	28
PID 2652 wrote to memory of 2060	2652	VoiceAi_Setup.exe	28

C:\Users\Admin\AppData\Local\Temp\VoiceAi_Setup.exe
"C:\Users\Admin\AppData\Local\Temp\VoiceAi_Setup.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2652
- C:\Users\Admin\AppData\Local\Temp\VoiceAi_Setup.exe
  "C:\Users\Admin\AppData\Local\Temp\VoiceAi_Setup.exe"
  2⤵
  - Loads dropped DLL
  - Suspicious behavior: GetForegroundWindowSpam
  PID:2060

C:\Users\Admin\AppData\Local\Temp\_MEI26522\python311.dll

Filesize
5.5MB

MD5
e2bd5ae53427f193b42d64b8e9bf1943

SHA1
7c317aad8e2b24c08d3b8b3fba16dd537411727f

SHA256
c4844b05e3a936b130adedb854d3c04d49ee54edb43e9d36f8c4ae94ccb78400

SHA512
ae23a6707e539c619fd5c5b4fc6e4734edc91f89ebe024d25ff2a70168da6105ac0bd47cf6bf3715af6411963caf0acbb4632464e1619ca6361abf53adfe7036

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI26522\python311.dll

Filesize
5.5MB

MD5
e2bd5ae53427f193b42d64b8e9bf1943

SHA1
7c317aad8e2b24c08d3b8b3fba16dd537411727f

SHA256
c4844b05e3a936b130adedb854d3c04d49ee54edb43e9d36f8c4ae94ccb78400

SHA512
ae23a6707e539c619fd5c5b4fc6e4734edc91f89ebe024d25ff2a70168da6105ac0bd47cf6bf3715af6411963caf0acbb4632464e1619ca6361abf53adfe7036

Download Submit