7ae564e41e4ab504d868185828cd6744d9d3db3e19568bbeb73147ef5ab569cd

Resubmissions

21/02/2024, 16:32

max time kernel
38s
max time network
21s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
21/02/2024, 16:32

Target

Prankscript.exe
Size

7.7MB
MD5

881f3059384fda647b92a71cdc5ecd87
SHA1

486b446825ef67fe29d5417d9291669c09a65934
SHA256

7ae564e41e4ab504d868185828cd6744d9d3db3e19568bbeb73147ef5ab569cd
SHA512

eefa6cb4ca32f776af913776ec31eec194ab26ec48d56e6d38cb7f100e9d25d2947e9917caa80b626d181c4fa96e439e393d5e47c350bd8ef1cf0edc42aac133
SSDEEP

196608:+92u+sxfmurErvI9pWjgU1DEzx7sKL/s1t3AkjUWlRHesv:0XxfmurEUWjhEhn01tt99v

Score

7^/10

upx

Loads dropped DLL 1 IoCs

pid	Process
2712	Prankscript.exe

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/files/0x00060000000167e5-22.dat	upx
behavioral1/memory/2712-24-0x000007FEF5D30000-0x000007FEF6409000-memory.dmp	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2224 wrote to memory of 2712	2224	Prankscript.exe	28
PID 2224 wrote to memory of 2712	2224	Prankscript.exe	28
PID 2224 wrote to memory of 2712	2224	Prankscript.exe	28

C:\Users\Admin\AppData\Local\Temp\Prankscript.exe
"C:\Users\Admin\AppData\Local\Temp\Prankscript.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2224
- C:\Users\Admin\AppData\Local\Temp\Prankscript.exe
  "C:\Users\Admin\AppData\Local\Temp\Prankscript.exe"
  2⤵
  - Loads dropped DLL
  PID:2712

C:\Users\Admin\AppData\Local\Temp\_MEI22242\python312.dll

Filesize
1.8MB

MD5
cbd02b4c0cf69e5609c77dfd13fba7c4

SHA1
a3c8f6bfd7ffe0783157e41538b3955519f1e695

SHA256
ecef0ed97c7b249af3c56cde0bfcae70f66530d716b48b5d94621c3dba8236b5

SHA512
a3760ecaa9736eb24370a0a20dd22a1ee53b3f8002195947bc7d21b239278ec8e26bcc131d0132c530767d1de59954be7946dcf54fcbf2584052c9d9a5615567

Download Submit
memory/2712-24-0x000007FEF5D30000-0x000007FEF6409000-memory.dmp

Filesize
6.8MB

Download