c6fc7c16d9c9dd355c59b1f3086fe790baad33c6be52881dfc21a9c049754920

Analysis

max time kernel
99s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
24-12-2023 20:35

Target

1147ceb14c198cacf0458fdfde2d4dd3.exe
Size

139KB
MD5

1147ceb14c198cacf0458fdfde2d4dd3
SHA1

23851f9ea5adc58a80145cc9183ddaedba23c28b
SHA256

c6fc7c16d9c9dd355c59b1f3086fe790baad33c6be52881dfc21a9c049754920
SHA512

6d7e8f8ca54ce5f435ba1098df48a42a343e8b0d9140894c787343e281c2df974b9698082c9ade84c0130fa078ac368c64465cb64c10406e4c2033ecad5cd648
SSDEEP

3072:RlB+fOqTNO/6GwCuDAUyJLywt7mmjlowz7TBfVlyOKWfTzW:Rlk2Ug3t1mmjb7TBtlyOKWfTS

Score

5^/10

Drops file in System32 directory 3 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\clean.config	1147ceb14c198cacf0458fdfde2d4dd3.exe
File opened for modification	C:\Windows\SysWOW64\clean.config	1147ceb14c198cacf0458fdfde2d4dd3.exe
File created	C:\Windows\SysWOW64\clean773a-3e91.sys	1147ceb14c198cacf0458fdfde2d4dd3.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
660	Process not Found

C:\Users\Admin\AppData\Local\Temp\1147ceb14c198cacf0458fdfde2d4dd3.exe
"C:\Users\Admin\AppData\Local\Temp\1147ceb14c198cacf0458fdfde2d4dd3.exe"
1⤵
- Drops file in System32 directory
PID:4504

C:\Windows\SysWOW64\clean.config

Filesize
2KB

MD5
f10cdfb640313c881ef26d2defc1aa34

SHA1
24c62ddd04c237e28d7dbaf0b69e4e7d5c73fd87

SHA256
1b3361997358043f7a759b7900f6245e40b562d1c169475657fe6d8ee9323931

SHA512
f06eb3ce33fe51713385c7834085d9a8b8869a7c383b3e8f959078f2583e4100b7ac6088d4f4187d5882163d0d517bbbe1222431b65358689737db5531cf5853

Download Submit