1079a613057f32e18e2f94db6e6451bb83eff68771297aeb8bc11919085c52a0

Analysis

max time kernel
1346s
max time network
1168s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
02/03/2024, 13:50

Target
KinitoPET.v1.1.0-P2P/KinitoPET/extra/e1.exe
Size 5.5MB
Sample240302-q5efgsec53
SHA256 c529c8e76c54025f183f2c3b185817b175b8947314ba9b41afd4746f77bab695
MD5 259ffd8cae9c794c111de74ee0aa728c
SHA1 91c7cc18c08b6abf0b1956bd9db96efc6ded27a1
SHA512 874c013531870b745b4eee9cddcca5c18967252dce37a37053526585c09900cc057bf00fbce8b4f40aa6944433cbdcf4ddfe11898688e5531b87bf5b305da9a6
SSDEEP 98304:aB+AB2uW5MI079g+DltLGMY8DI65KiaYGgQ30LJd2UqLjkLqpLj+ZvVuKr:apkL2V76+DXLZy7YM30LzajzpLEVuC
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Loads dropped DLL 2 IoCs

pid	Process
632	e1.exe
632	e1.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 2800 wrote to memory of 632	2800	e1.exe	88
PID 2800 wrote to memory of 632	2800	e1.exe	88

C:\Users\Admin\AppData\Local\Temp\KinitoPET.v1.1.0-P2P\KinitoPET\extra\e1.exe
"C:\Users\Admin\AppData\Local\Temp\KinitoPET.v1.1.0-P2P\KinitoPET\extra\e1.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2800
- C:\Users\Admin\AppData\Local\Temp\KinitoPET.v1.1.0-P2P\KinitoPET\extra\e1.exe
  "C:\Users\Admin\AppData\Local\Temp\KinitoPET.v1.1.0-P2P\KinitoPET\extra\e1.exe"
  2⤵
  - Loads dropped DLL
  PID:632

VCRUNTIME140.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI28002\VCRUNTIME140.dll
Size 95KB
SHA256 9d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1
MD5 f34eb034aa4a9735218686590cba2e8b
SHA1 2bc20acdcb201676b77a66fa7ec6b53fa2644713
SHA512 d27d5e65e8206bd7923cf2a3c4384fec0fc59e8bc29e25f8c03d039f3741c01d1a8c82979d7b88c10b209db31fbbec23909e976b3ee593dc33481f0050a445af
SSDEEP 1536:ywqHLG4SsAzAvadZw+1Hcx8uIYNUzUoHA4decbK/zJNuw6z5U:ytrfZ+jPYNzoHA4decbK/FNu51U
MD5 SHA1 SHA512 SSDEEP

Submit Download

base_library.zip

Path C:\Users\Admin\AppData\Local\Temp\_MEI28002\base_library.zip
Size 1014KB
SHA256 c8b6c41aa788862f7dcb729144ba17e55ff7053d7d85168749c3d24d16313a97
MD5 705b0572443ef8afd39e7645b62b7bc9
SHA1 6d7e1cb208d2a09620d11eb8109cf12d5bc029fb
SHA512 9ba555bafbb5c2c95beef36dbb02fdb281cc076db196251a8dac1cc7a259f9de9294f4a90600258cc5c9954abd2662e87773e06fc1c5947d7710b85062d229a1
SSDEEP 24576:1K73tOkQcosQNRs54PK4ItEVwZ+fvEhagBJjSCO:1K73tOTcosQNRs54PK4ItgwJM
MD5 SHA1 SHA512 SSDEEP

Submit Download

python39.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI28002\python39.dll
Size 4.3MB
SHA256 324963a39b8fd045ff634bb3271508dab5098b4d99e85e7648d0b47c32dc85c3
MD5 2135da9f78a8ef80850fa582df2c7239
SHA1 aac6ad3054de6566851cae75215bdeda607821c4
SHA512 423b03990d6aa9375ce10e6b62ffdb7e1e2f20a62d248aac822eb9d973ae2bf35deddd2550a4a0e17c51ad9f1e4f86443ca8f94050e0986daa345d30181a2369
SSDEEP 49152:icfsV4WJ+NXBzGcS5V7Du7RHEYNf/OpEQZIMKKx+qNIowg1h9MKpj4ZkYMCfmUIS:6JeB1SDaZf/7Ns9MLZfERUHRMXIwNKX
MD5 SHA1 SHA512 SSDEEP

Submit Download