bb230463b506250de6d686aedf08ed6357115a60034640238675fec7a2d2f64b

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 22:00

Target

bb230463b506250de6d686aedf08ed6357115a60034640238675fec7a2d2f64b.exe
Size

14.1MB
MD5

0daadb0be44d6e2ff640226d3c0265e5
SHA1

8ff3b0988c2d566ad2abfd05bd200fe0ea8f3ae1
SHA256

bb230463b506250de6d686aedf08ed6357115a60034640238675fec7a2d2f64b
SHA512

85d7466c0b279219a832d3e4166b4315bce0ca2323d2d69872356b7c084c9b9b3af673b38ee74c6134d44a16ff154569aaf7747554a2b461ddcc4905255cc671
SSDEEP

393216:G66Soo7M2L6bDdquUdDLBfkEeibmW1s8meJ4dpu2bPx:QPo9udquUdDLBf/T31sOkx

Score

4^/10

Drops file in Program Files directory 11 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Efofex\bin\FXEquation.exe	bb230463b506250de6d686aedf08ed6357115a60034640238675fec7a2d2f64b.exe
File created	C:\Program Files (x86)\Efofex\bin\FXDraw.exe	bb230463b506250de6d686aedf08ed6357115a60034640238675fec7a2d2f64b.exe
File opened for modification	C:\Program Files (x86)\Efofex	bb230463b506250de6d686aedf08ed6357115a60034640238675fec7a2d2f64b.exe
File opened for modification	C:\Program Files (x86)\Efofex\bin	bb230463b506250de6d686aedf08ed6357115a60034640238675fec7a2d2f64b.exe
File created	C:\Program Files (x86)\Efofex\bin\FXGraph.exe	bb230463b506250de6d686aedf08ed6357115a60034640238675fec7a2d2f64b.exe
File opened for modification	C:\Program Files (x86)\Efofex\bin\FXGraph.exe	bb230463b506250de6d686aedf08ed6357115a60034640238675fec7a2d2f64b.exe
File created	C:\Program Files (x86)\Efofex\bin\FXStat.exe	bb230463b506250de6d686aedf08ed6357115a60034640238675fec7a2d2f64b.exe
File created	C:\Program Files (x86)\Efofex\bin\__tmp_rar_sfx_access_check_259432314	bb230463b506250de6d686aedf08ed6357115a60034640238675fec7a2d2f64b.exe
File opened for modification	C:\Program Files (x86)\Efofex\bin\FXStat.exe	bb230463b506250de6d686aedf08ed6357115a60034640238675fec7a2d2f64b.exe
File opened for modification	C:\Program Files (x86)\Efofex\bin\FXEquation.exe	bb230463b506250de6d686aedf08ed6357115a60034640238675fec7a2d2f64b.exe
File opened for modification	C:\Program Files (x86)\Efofex\bin\FXDraw.exe	bb230463b506250de6d686aedf08ed6357115a60034640238675fec7a2d2f64b.exe

C:\Users\Admin\AppData\Local\Temp\bb230463b506250de6d686aedf08ed6357115a60034640238675fec7a2d2f64b.exe
"C:\Users\Admin\AppData\Local\Temp\bb230463b506250de6d686aedf08ed6357115a60034640238675fec7a2d2f64b.exe"
1⤵
- Drops file in Program Files directory
PID:2992