f20f174d952dadf9fdd6e8f27cc38253a1be8677aa6aee7eae78017efd29caaf

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08-05-2024 04:25

Target

f20f174d952dadf9fdd6e8f27cc38253a1be8677aa6aee7eae78017efd29caaf.exe
Size

48KB
MD5

f8646241be9eb67f7ad7a3ee4b10d8e5
SHA1

ceb42632339ccb98a84d98883b2782c67cf79d53
SHA256

f20f174d952dadf9fdd6e8f27cc38253a1be8677aa6aee7eae78017efd29caaf
SHA512

9888f5d16365b276fef6ef30b2d98a95456f2a752b6438a1e8cac2a3f878e44fce0d1712a69a9ff76f60a6618079e8b4966e50ee197f7f3787302e14c0da288e
SSDEEP

768:ErzgnD4UESkFEqVHPEnLhEgMfd+KxC6kWgOYjAVcf6xlJk8pgFldt5xNx1RJtNwc:EIn3qlLohnJAVcfvNRTzj3P

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2976	rmass.exe

Loads dropped DLL 1 IoCs

pid	Process
2784	f20f174d952dadf9fdd6e8f27cc38253a1be8677aa6aee7eae78017efd29caaf.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\rmass.exe	f20f174d952dadf9fdd6e8f27cc38253a1be8677aa6aee7eae78017efd29caaf.exe
File created	C:\Windows\SysWOW64\rmass.exe	f20f174d952dadf9fdd6e8f27cc38253a1be8677aa6aee7eae78017efd29caaf.exe

C:\Users\Admin\AppData\Local\Temp\f20f174d952dadf9fdd6e8f27cc38253a1be8677aa6aee7eae78017efd29caaf.exe
"C:\Users\Admin\AppData\Local\Temp\f20f174d952dadf9fdd6e8f27cc38253a1be8677aa6aee7eae78017efd29caaf.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2784
- C:\Windows\SysWOW64\rmass.exe
  "C:\Windows\SysWOW64\rmass.exe"
  2⤵
  - Executes dropped EXE
  PID:2976

\Windows\SysWOW64\rmass.exe

Filesize
45KB

MD5
1f01e8d655e2083dbbd9177114db88d0

SHA1
4471b7e650e25147599d1bdf6fe00addecf1d9c1

SHA256
d7e32940c603da9dfeff375fec61057bad373f216125759dcb3b5bef34fe4e2d

SHA512
0bac7ea2a367c2f4a72b8afb140de1274a3511e6919185a5a2cc83be8b2435c0f4792e8395bda566b35ee88fbe2db0bc523d1e0fd37f00854cd1eb8a1c391d14

Download Submit
memory/2784-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download