4383fdee71e73ca8b6296078d72f2ec199f17bd82a3f8a1b53dc65412a9b7bfd

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
08/01/2024, 11:07

Target

4b443f5a1b22aca03dbf7ec94ed560a2.exe
Size

7KB
MD5

4b443f5a1b22aca03dbf7ec94ed560a2
SHA1

c37e3a97693b8c732d191c233dccebfd06e8592a
SHA256

4383fdee71e73ca8b6296078d72f2ec199f17bd82a3f8a1b53dc65412a9b7bfd
SHA512

ce40e3d9dc1fb207bbbfe0a762255528c58693efcca56a7255152c2e03787f17f55713d83f1e4ce241615b9cdb53faa6b32f3a7a0b51eb21bb40d613137cecc7
SSDEEP

96:+MWQONvrBEvYY/NefexLYfAg3bbsQprP4oynhihHw9hkP17E:+JQeBEvYgNweKft3bbsQprP4oynU6qE

Score

8^/10

Drops file in Drivers directory 1 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\drivers\microsoft.sys	4b443f5a1b22aca03dbf7ec94ed560a2.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
468	Process not Found

C:\Users\Admin\AppData\Local\Temp\4b443f5a1b22aca03dbf7ec94ed560a2.exe
"C:\Users\Admin\AppData\Local\Temp\4b443f5a1b22aca03dbf7ec94ed560a2.exe"
1⤵
- Drops file in Drivers directory
PID:1684