6a9dcd8d7343f22f07b9d7621e60d0e87cfd4852f95a16a7944c1539493a2682

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10/03/2024, 21:54

Target

6a9dcd8d7343f22f07b9d7621e60d0e87cfd4852f95a16a7944c1539493a2682.exe
Size

70KB
MD5

83f763ebd717b7ffbf601513b0ab3557
SHA1

ca3f64b0512fc246fbfdc2e39f37f017168dd3df
SHA256

6a9dcd8d7343f22f07b9d7621e60d0e87cfd4852f95a16a7944c1539493a2682
SHA512

4859a75a1a3b965b7bcf934758f2981decc8c98184ad30272472bfdd893efc01b5d599cf7603daf34dca497ce886897407cf4eaaf525b0707c9c5501e02302e4
SSDEEP

1536:14R9KzUD5X66zFOa2INL0U/zDDiGPsMI7MPeDkn:2KzAXXzFt2INJ/4MPuA

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
1928	ouckigim.exe

Loads dropped DLL 1 IoCs

pid	Process
1712	6a9dcd8d7343f22f07b9d7621e60d0e87cfd4852f95a16a7944c1539493a2682.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\WINDOWS\SysWOW64\ouckigim.exe	6a9dcd8d7343f22f07b9d7621e60d0e87cfd4852f95a16a7944c1539493a2682.exe
File created	C:\WINDOWS\SysWOW64\ouckigim.exe	6a9dcd8d7343f22f07b9d7621e60d0e87cfd4852f95a16a7944c1539493a2682.exe

C:\Users\Admin\AppData\Local\Temp\6a9dcd8d7343f22f07b9d7621e60d0e87cfd4852f95a16a7944c1539493a2682.exe
"C:\Users\Admin\AppData\Local\Temp\6a9dcd8d7343f22f07b9d7621e60d0e87cfd4852f95a16a7944c1539493a2682.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:1712
- C:\WINDOWS\SysWOW64\ouckigim.exe
  "C:\WINDOWS\system32\ouckigim.exe"
  2⤵
  - Executes dropped EXE
  PID:1928

\Windows\SysWOW64\ouckigim.exe

Filesize
67KB

MD5
0f199d218e8847acac281f91a35a7ae4

SHA1
098010fb35f93be3176d374d5d12e3878fa5f95f

SHA256
33badbe2467e106a62226587a4b2cdfc9ef036e7985519cc2e4cb46ba1594341

SHA512
437f1a3bf4855d559aeb7305cf6edc11b36041c5f8c805b5f925699dc0721f47c243daf1647de71e99a9799623f345539c9ddebc959a88571ec953b42792cd7a

Download Submit
memory/1712-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download