e7f583bb9f3a6bb45a0f1b59cf2c3f2060553e939adeeebfb996c7912163c8ff

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
23/02/2024, 11:46

Target

votware/votware setup.exe
Size

14.4MB
MD5

a2eec729d72fe550ad6f08ed74d10b5c
SHA1

8aeff77c539fc006cd968052678de9d73cdfc99c
SHA256

27966ee7482797adad4840838bded44ecb78bc9bcdbd4a16a753d777cfc0bd25
SHA512

2014574b4a724d1604e461e50f14489a825ef7c3a1404397cd5d4f9aa16c2d0bf6cc9f3069d89bb2c5fea3e6a5ebe0ac04c8eaab7b5efe38400290d6add2cea1
SSDEEP

393216:yEkZQJidQuslSq99oWOv+9fgpFO8Mqvst:yhQwdQuSDorvSYpFBlv

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
2488	votware setup.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1284 wrote to memory of 2488	1284	votware setup.exe	28
PID 1284 wrote to memory of 2488	1284	votware setup.exe	28
PID 1284 wrote to memory of 2488	1284	votware setup.exe	28

C:\Users\Admin\AppData\Local\Temp\votware\votware setup.exe
"C:\Users\Admin\AppData\Local\Temp\votware\votware setup.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1284
- C:\Users\Admin\AppData\Local\Temp\votware\votware setup.exe
  "C:\Users\Admin\AppData\Local\Temp\votware\votware setup.exe"
  2⤵
  - Loads dropped DLL
  PID:2488

C:\Users\Admin\AppData\Local\Temp\_MEI12842\python310.dll

Filesize
1.8MB

MD5
ff8c7c953d69f5b5c5e2439b680358e7

SHA1
53e585b1281461715327becddaaff8b85ffebcc0

SHA256
80e47a08b9afede819d40845a955a1db072656419a7180fda4a93dc0f233b539

SHA512
6604b1f4a14ab312ec4293c3897218a80146ac3386cbb6c13e59fa0c09b89b82d219d13f57277ca1f2f843157b75af6ce01b20de59ba7aa6b2da087047ab60b2

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI12842\python310.dll

Filesize
4.3MB

MD5
deaf0c0cc3369363b800d2e8e756a402

SHA1
3085778735dd8badad4e39df688139f4eed5f954

SHA256
156cf2b64dd0f4d9bdb346b654a11300d6e9e15a65ef69089923dafc1c71e33d

SHA512
5cac1d92af7ee18425b5ee8e7cd4e941a9ddffb4bc1c12bb8aeabeed09acec1ff0309abc41a2e0c8db101fee40724f8bfb27a78898128f8746c8fe01c1631989

Download Submit