a211d0e84497f537aaa5a3d587110379d786201696e8413b13f97dda302eec8b

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
06-03-2024 22:24

Target

a211d0e84497f537aaa5a3d587110379d786201696e8413b13f97dda302eec8b.exe
Size

71KB
MD5

f07aea344e16a28ead8253fcdab1fb39
SHA1

a9fd94e21a7ad536e129d24e71cfc38bf005acb2
SHA256

a211d0e84497f537aaa5a3d587110379d786201696e8413b13f97dda302eec8b
SHA512

f995d7671578e6dd0f9c1f3bcb502d8c31f0912cfda85bd3942b21205a3b20d69a86590b3293d2ac16d058a339e4a264077afc007fdfb2a00351f20e15a855e7
SSDEEP

768:hZZ6Zyf9ZIuoI9Igg93neKR3j0zOkbAQ9w9tCn6bch2Hv04F6G6UWEnvyciQvoyI:1+IolkbAz986b784UUWcaciQvoyHveRx

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2628	ofceatuc.exe

Loads dropped DLL 1 IoCs

pid	Process
2956	a211d0e84497f537aaa5a3d587110379d786201696e8413b13f97dda302eec8b.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\ofceatuc.exe	a211d0e84497f537aaa5a3d587110379d786201696e8413b13f97dda302eec8b.exe
File created	C:\Windows\SysWOW64\ofceatuc.exe	a211d0e84497f537aaa5a3d587110379d786201696e8413b13f97dda302eec8b.exe

C:\Users\Admin\AppData\Local\Temp\a211d0e84497f537aaa5a3d587110379d786201696e8413b13f97dda302eec8b.exe
"C:\Users\Admin\AppData\Local\Temp\a211d0e84497f537aaa5a3d587110379d786201696e8413b13f97dda302eec8b.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2956
- C:\Windows\SysWOW64\ofceatuc.exe
  "C:\Windows\SysWOW64\ofceatuc.exe"
  2⤵
  - Executes dropped EXE
  PID:2628

\Windows\SysWOW64\ofceatuc.exe

Filesize
68KB

MD5
6fe828d8b7839b190fb2bdc21a371a47

SHA1
72f92fe390ede9c2f2cc8af6cd1c10f3f5db10af

SHA256
5259a51d4ef77d8cdfce121249dbb7ebb0795eadc9dd9915e22d3cdbc20b594c

SHA512
9c75417c31302c923ffdbfb25d8e15ae77c3036ac14f92095bc683b220825abf0a17b78442c1db227dca51321f0470ef18321c1c34d3e1687bab3c90f72ce768

Download Submit
memory/2956-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download