75ce91d4f361227c1275a326653533c5eaa494b87dd96c529b03d0a3a6ff9ae2

Analysis

max time kernel
119s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
20/02/2024, 01:23

Target

ORIONX-FUD-CRYPTER-main/ORIONX FUD CRYPTER.exe
Size

9.6MB
MD5

af452c108fee8530119d2534722238dd
SHA1

3d40eb00f9a455f5550a1b3ddd60c8dd09b13244
SHA256

a1539f9996c040b18c34983d48b80a3592f00c93ab5a279bf015999cf1796e1b
SHA512

fb12422ab74300c6874689659136da2655f02f2200a9de92d343e79ce1dd43f6d9277544d73d21066696fedb3be6b0407264979fefc75763f2d279a2655b486e
SSDEEP

196608:hFCY0yk+DfyGZ21X5Sp6GemDMPwSaw2cgWg1bMe0W8/LaNrruuWC:TCY0yxDfD0pfaMPXaw2a5W80ui

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
2016	ORIONX FUD CRYPTER.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2772 wrote to memory of 2016	2772	ORIONX FUD CRYPTER.exe	28
PID 2772 wrote to memory of 2016	2772	ORIONX FUD CRYPTER.exe	28
PID 2772 wrote to memory of 2016	2772	ORIONX FUD CRYPTER.exe	28

C:\Users\Admin\AppData\Local\Temp\ORIONX-FUD-CRYPTER-main\ORIONX FUD CRYPTER.exe
"C:\Users\Admin\AppData\Local\Temp\ORIONX-FUD-CRYPTER-main\ORIONX FUD CRYPTER.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2772
- C:\Users\Admin\AppData\Local\Temp\ORIONX-FUD-CRYPTER-main\ORIONX FUD CRYPTER.exe
  "C:\Users\Admin\AppData\Local\Temp\ORIONX-FUD-CRYPTER-main\ORIONX FUD CRYPTER.exe"
  2⤵
  - Loads dropped DLL
  PID:2016

C:\Users\Admin\AppData\Local\Temp\_MEI27722\python311.dll

Filesize
3.1MB

MD5
683d26e04075b6a97061fc5263f51c95

SHA1
8ef519ce787fae831581c83340b3ae22cd456d96

SHA256
1e4b798b722e4ca44b101a1bc25066d98dad180551c8f780c8d787c2471b0384

SHA512
b1b10ff826b2ebe7fadcfe7f2be253c948c70ced3f59d2fa9bf8b5eac34be903701e28e7c1dca62e4555ff1ae050abefe67cba6a13b6ce726605fbae20941b03

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI27722\python311.dll

Filesize
5.5MB

MD5
e2bd5ae53427f193b42d64b8e9bf1943

SHA1
7c317aad8e2b24c08d3b8b3fba16dd537411727f

SHA256
c4844b05e3a936b130adedb854d3c04d49ee54edb43e9d36f8c4ae94ccb78400

SHA512
ae23a6707e539c619fd5c5b4fc6e4734edc91f89ebe024d25ff2a70168da6105ac0bd47cf6bf3715af6411963caf0acbb4632464e1619ca6361abf53adfe7036

Download Submit