711e22f8b40ff8113783cad23da93d4381c78e9169c0f34211bc8a583f618f81

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 21:24

Target

045f2b0354dd5f970cf52d9bf310493c.exe
Size

423KB
MD5

045f2b0354dd5f970cf52d9bf310493c
SHA1

e766d7eff49c24f6e745e35dfd35711ca42ef27a
SHA256

711e22f8b40ff8113783cad23da93d4381c78e9169c0f34211bc8a583f618f81
SHA512

cca3d3a90ada0b804e1fb8d3a5669887fbfdbeef93d02b31d540e20a1126b46c62c1cc0cd02f9e4c545849f53c9b738ccba4efb3ce07ed9f1fe4f53d093b3062
SSDEEP

12288:U17YpvNYK5huNU8jdeRrL0uvhOrbCh9hCOAm10dNwm/:wwK6kjdiLEr+SdNT/

Score

5^/10

Drops file in System32 directory 1 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\SVKP.sys	045f2b0354dd5f970cf52d9bf310493c.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
464	Process not Found

C:\Users\Admin\AppData\Local\Temp\045f2b0354dd5f970cf52d9bf310493c.exe
"C:\Users\Admin\AppData\Local\Temp\045f2b0354dd5f970cf52d9bf310493c.exe"
1⤵
- Drops file in System32 directory
PID:796

memory/796-0-0x00000000002B0000-0x000000000031D000-memory.dmp

Filesize
436KB

Download
memory/796-2-0x0000000000330000-0x0000000000332000-memory.dmp

Filesize
8KB

Download
memory/796-4-0x0000000000340000-0x00000000003A7000-memory.dmp

Filesize
412KB

Download
memory/796-1-0x00000000002A0000-0x00000000002A2000-memory.dmp

Filesize
8KB

Download
memory/796-6-0x0000000000320000-0x0000000000322000-memory.dmp

Filesize
8KB

Download
memory/796-5-0x00000000003B0000-0x00000000003B2000-memory.dmp

Filesize
8KB

Download
memory/796-7-0x0000000000400000-0x00000000004E5000-memory.dmp

Filesize
916KB

Download
memory/796-8-0x00000000002B0000-0x000000000031D000-memory.dmp

Filesize
436KB

Download
memory/796-9-0x0000000000340000-0x00000000003A7000-memory.dmp

Filesize
412KB

Download