e4ba963c112b5ec4f274b6dad8b3cfa89e513517ab4fa2eebd6a59fd5c96784c

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08/03/2024, 01:12

Target

e4ba963c112b5ec4f274b6dad8b3cfa89e513517ab4fa2eebd6a59fd5c96784c.exe
Size

72KB
MD5

f567d35c4a7a07a644582d2717a5ed5c
SHA1

7ebde6223eea62ebe9b9396f26bb4cfa3c4722f9
SHA256

e4ba963c112b5ec4f274b6dad8b3cfa89e513517ab4fa2eebd6a59fd5c96784c
SHA512

419a0708b9c476ae0892518f2a221898fbbb58e1ad96b2c5b8367b8060f01ad6fc7b5c33abea154c3201dffe29b49d64613ab816df3cff38241fb36d5a0b0bf4
SSDEEP

1536:1gU/dYYgahv7wBFcJhCzJyFP46pEg+gpbDib:+U1YYgmv7GxyzpEg+gYb

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2476	ouchoavek.exe

Loads dropped DLL 1 IoCs

pid	Process
2252	e4ba963c112b5ec4f274b6dad8b3cfa89e513517ab4fa2eebd6a59fd5c96784c.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\ouchoavek.exe	e4ba963c112b5ec4f274b6dad8b3cfa89e513517ab4fa2eebd6a59fd5c96784c.exe
File created	C:\Windows\SysWOW64\ouchoavek.exe	e4ba963c112b5ec4f274b6dad8b3cfa89e513517ab4fa2eebd6a59fd5c96784c.exe

C:\Users\Admin\AppData\Local\Temp\e4ba963c112b5ec4f274b6dad8b3cfa89e513517ab4fa2eebd6a59fd5c96784c.exe
"C:\Users\Admin\AppData\Local\Temp\e4ba963c112b5ec4f274b6dad8b3cfa89e513517ab4fa2eebd6a59fd5c96784c.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2252
- C:\Windows\SysWOW64\ouchoavek.exe
  "C:\Windows\SysWOW64\ouchoavek.exe"
  2⤵
  - Executes dropped EXE
  PID:2476

\Windows\SysWOW64\ouchoavek.exe

Filesize
69KB

MD5
5d1543eced4252e2f6106ccf753220fb

SHA1
bace8860a7a8a3384a4222dfce2c0fff8173931e

SHA256
01ce738204c136bc3224b1807e082a11d3635f71f12cadb40b676c07d921e685

SHA512
e8cab570254d3817843d5b3bdcbe2b7848635538512494d928c0ee0dbc982a490698609ef9b6d8d9c2f3a0586090aab51b0ea2fba29c7d8de8cd512b8fb14b92

Download Submit
memory/2252-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download