6b9883ee443b5304250f180c9c066950a651414e0c97330f2dfee9863d64ed69

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
09/05/2024, 22:35

Target

6b9883ee443b5304250f180c9c066950a651414e0c97330f2dfee9863d64ed69.exe
Size

73KB
MD5

c4cc48c9500c1acb1eea264012839322
SHA1

85e932765b1b3ddf5b48b31e4bd0e17e802a9a2d
SHA256

6b9883ee443b5304250f180c9c066950a651414e0c97330f2dfee9863d64ed69
SHA512

c63c0d6d28d55aab09e02c3fa456a76da65176b874edcb6d08461968fac8e4a9e65132bcf4a910fc8501f76ebec82af1e72288f764d4ac3ac81aa2d8ab67a699
SSDEEP

1536:1wrcZa4V5fH01ZJdlUOIV3js6/XyMgjm6Ul0sYnLwDFz:y6RRH0IVweitm7lXYnED9

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2996	omdogad-ivid.exe

Loads dropped DLL 1 IoCs

pid	Process
1444	6b9883ee443b5304250f180c9c066950a651414e0c97330f2dfee9863d64ed69.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\omdogad-ivid.exe	6b9883ee443b5304250f180c9c066950a651414e0c97330f2dfee9863d64ed69.exe
File created	C:\Windows\SysWOW64\omdogad-ivid.exe	6b9883ee443b5304250f180c9c066950a651414e0c97330f2dfee9863d64ed69.exe

C:\Users\Admin\AppData\Local\Temp\6b9883ee443b5304250f180c9c066950a651414e0c97330f2dfee9863d64ed69.exe
"C:\Users\Admin\AppData\Local\Temp\6b9883ee443b5304250f180c9c066950a651414e0c97330f2dfee9863d64ed69.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:1444
- C:\Windows\SysWOW64\omdogad-ivid.exe
  "C:\Windows\SysWOW64\omdogad-ivid.exe"
  2⤵
  - Executes dropped EXE
  PID:2996

\Windows\SysWOW64\omdogad-ivid.exe

Filesize
70KB

MD5
2daf064d2e559e8176c2f80cd8bd04f7

SHA1
372f29c9c738b38fa7c1af2f7cb8cd5159059437

SHA256
6b969ea535d6aa24385b0f4b4e69a0676f3f32af097d0c3657d3ee0615991c9b

SHA512
3c01aebae4d9fb9158a36ee07578833e737f8ff524f99190a1c92d86aa5917a16f3f9652011ce0744a6e75820b0e798da7c786f26eec0cfecf1705a30da37dd0

Download Submit
memory/1444-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download