d6e1501df9f06ca74775085200acdc93df3aad471effa8a5d364938ead3c6476

Analysis

max time kernel
93s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
29/04/2024, 02:48

Target

d6e1501df9f06ca74775085200acdc93df3aad471effa8a5d364938ead3c6476.exe
Size

73KB
MD5

51e3db5539f47dcd6caa729e1e33f6e7
SHA1

0acb0bf1af3ea519ccf5edcd7f1672ce1dddea05
SHA256

d6e1501df9f06ca74775085200acdc93df3aad471effa8a5d364938ead3c6476
SHA512

fbe14c35898a51c5fedf5e3113613e358751717e0705a2097a347d8f70145fc4f3a7c57fa3e985d043ee50422acc454fa655d8369c25734f0c839dd6979ab6a9
SSDEEP

1536:149UmVdZr9ofEE8llCAn3pkBbBziXdIV1Pc:2OmV9vfn5WBziaVO

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
4376	obpovap.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\obpovap.exe	d6e1501df9f06ca74775085200acdc93df3aad471effa8a5d364938ead3c6476.exe
File opened for modification	C:\Windows\SysWOW64\obpovap.exe	d6e1501df9f06ca74775085200acdc93df3aad471effa8a5d364938ead3c6476.exe

C:\Users\Admin\AppData\Local\Temp\d6e1501df9f06ca74775085200acdc93df3aad471effa8a5d364938ead3c6476.exe
"C:\Users\Admin\AppData\Local\Temp\d6e1501df9f06ca74775085200acdc93df3aad471effa8a5d364938ead3c6476.exe"
1⤵
- Drops file in System32 directory
PID:1512
- C:\Windows\SysWOW64\obpovap.exe
  "C:\Windows\SysWOW64\obpovap.exe"
  2⤵
  - Executes dropped EXE
  PID:4376

C:\Windows\SysWOW64\obpovap.exe

Filesize
70KB

MD5
57c93135bcf963c3250fdb39289a7cfa

SHA1
c727573cd841a51c09dfcc526dda53c89161526d

SHA256
b29c952b2ba42b7b546af8d02314391e2e1a0d222ae51900ba0ff9332cb93bcd

SHA512
158b59c1aaf6c7ccbff35a9835f1c07d94d3b01b22ecc8112087f71ef58249ea12ab3eaa75ca0b66f01e32030c24efde5db395ad3a66426dffc6353aefb8d42b

Download Submit
memory/1512-3-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/1512-4-0x0000000077A82000-0x0000000077A83000-memory.dmp

Filesize
4KB

Download