cfec7b823aa014baefe2e4dff89624e333976932d536db0f754c3fbd07da651d

Analysis

max time kernel
122s
max time network
134s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 07:11

Target

11d3916455c74d819d75e71b97fa1bc2.exe
Size

80KB
MD5

11d3916455c74d819d75e71b97fa1bc2
SHA1

8be524b37ddd65781ea64610f1f2ebdbeee680e4
SHA256

cfec7b823aa014baefe2e4dff89624e333976932d536db0f754c3fbd07da651d
SHA512

0d0a4f6c430cbb54b82baf083e657e4218b8597f37ccc41b6f664fc1d11a693bffaac5cc29eaf68f80ddc3d5371eb22fbb0de769333e6f84e82947c325b247f7
SSDEEP

768:KZDsWM3RWhrSIrl3vokVVFbCeJt1awYF6olzQOFXSqrfu:mWPgl/oknFblHYw/olzQOFisu

Score

5^/10

Drops file in System32 directory 10 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\explorer.exe	11d3916455c74d819d75e71b97fa1bc2.exe
File opened for modification	C:\Windows\SysWOW64\perfhost.exe	11d3916455c74d819d75e71b97fa1bc2.exe
File opened for modification	C:\Windows\SysWOW64\setup16.exe	11d3916455c74d819d75e71b97fa1bc2.exe
File opened for modification	C:\Windows\SysWOW64\ntkrnlpa.exe	11d3916455c74d819d75e71b97fa1bc2.exe
File opened for modification	C:\Windows\SysWOW64\regedit.exe	11d3916455c74d819d75e71b97fa1bc2.exe
File opened for modification	C:\Windows\SysWOW64\setupSNK.exe	11d3916455c74d819d75e71b97fa1bc2.exe
File opened for modification	C:\Windows\SysWOW64\user.exe	11d3916455c74d819d75e71b97fa1bc2.exe
File opened for modification	C:\Windows\SysWOW64\dplaysvr.exe	11d3916455c74d819d75e71b97fa1bc2.exe
File opened for modification	C:\Windows\SysWOW64\hh.exe	11d3916455c74d819d75e71b97fa1bc2.exe
File opened for modification	C:\Windows\SysWOW64\instnm.exe	11d3916455c74d819d75e71b97fa1bc2.exe

C:\Users\Admin\AppData\Local\Temp\11d3916455c74d819d75e71b97fa1bc2.exe
"C:\Users\Admin\AppData\Local\Temp\11d3916455c74d819d75e71b97fa1bc2.exe"
1⤵
- Drops file in System32 directory
PID:1488

memory/1488-0-0x0000000000400000-0x0000000000415000-memory.dmp

Filesize
84KB

Download
memory/1488-1-0x0000000000400000-0x0000000000415000-memory.dmp

Filesize
84KB

Download