2e02319b1ac8bb0ebf24126f0bce493befc2d8c8f97136e8c6c0b15a24be68c7

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
25/03/2024, 18:22

Target

Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.exe
Size

5.8MB
MD5

5aa8f34d1bbfe70fe510e6f93a408c78
SHA1

79fe07a251dd912f95c4ac28aa84458570778935
SHA256

2e02319b1ac8bb0ebf24126f0bce493befc2d8c8f97136e8c6c0b15a24be68c7
SHA512

c847992883d8c136654bc2c5885ec8e2a77738d173719d11e7462f61f610ad6afc1984328fd2e0edc64e8f03f6569595a9656715acc0bbbf1febfaff3d835ec6
SSDEEP

98304:XkLpP65MK0UaW80mE254j9Z8y6BQ78IN//zYAOZC4fwt3eaXMr4prGuh8JRLkla+:sg5MKxaW8H/ELeBIN//zlWHf23PMcrpt

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2684	Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.tmp

Loads dropped DLL 1 IoCs

pid	Process
2184	Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2184 wrote to memory of 2684	2184	Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.exe	28
PID 2184 wrote to memory of 2684	2184	Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.exe	28
PID 2184 wrote to memory of 2684	2184	Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.exe	28
PID 2184 wrote to memory of 2684	2184	Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.exe	28
PID 2184 wrote to memory of 2684	2184	Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.exe	28
PID 2184 wrote to memory of 2684	2184	Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.exe	28
PID 2184 wrote to memory of 2684	2184	Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.exe	28

C:\Users\Admin\AppData\Local\Temp\Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.exe
"C:\Users\Admin\AppData\Local\Temp\Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.exe"
1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2184
- C:\Users\Admin\AppData\Local\Temp\is-LRNQ4.tmp\Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-LRNQ4.tmp\Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.tmp" /SL5="$3014E,5196411,898560,C:\Users\Admin\AppData\Local\Temp\Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.exe"
  2⤵
  - Executes dropped EXE
  PID:2684

C:\Users\Admin\AppData\Local\Temp\is-LRNQ4.tmp\Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.tmp

Filesize
2.7MB

MD5
9f732e3081102298fd97b9e4e6c9180d

SHA1
2f2c4ed175f875c9166ff7a0a60f7ca563018274

SHA256
e072d38c38b99d7ac51240c42add9547a2f051a3c382034eca734411947512ec

SHA512
e00911878dffd3d72f84b1941d432dd798764cd372af009e13e8730b9632ac9404f04384c1895f80658435f2a18398477ddd60bd5a4c0290588f871760449266

Download Submit
\Users\Admin\AppData\Local\Temp\is-LRNQ4.tmp\Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.tmp

Filesize
2.5MB

MD5
e4d7548c46898ac6e7d180be2bd0b96a

SHA1
30664319ce0da6f22dec47b804ea6a1ac0fcf630

SHA256
0662e126dc345b7e0395ab35f59e429d172ba2a05d0e50724e0b1c508cff5ede

SHA512
f2a071f2fd81e493e5c9fc4ac3dcda42982c99521a7f6b9e3ff45e27dd548e8dc0da05c09b3e27d0c0865f15355e4cc51eb249f3cc363a1240bd50d36bb75f13

Download Submit
memory/2184-1-0x0000000000400000-0x00000000004E9000-memory.dmp

Filesize
932KB

Download
memory/2184-13-0x0000000000400000-0x00000000004E9000-memory.dmp

Filesize
932KB

Download
memory/2684-8-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/2684-11-0x0000000000400000-0x0000000000724000-memory.dmp

Filesize
3.1MB

Download