27b6c06149899020c55528e0c35fb2911caf36d93cd20bc52bd776cbb14b32f7

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
11/05/2024, 19:44

Target

27b6c06149899020c55528e0c35fb2911caf36d93cd20bc52bd776cbb14b32f7.exe
Size

74KB
MD5

39fb32c94a2026d998fe3b86b27a3a9a
SHA1

19479b3f6752ad339ef265621e18721313fd7cc3
SHA256

27b6c06149899020c55528e0c35fb2911caf36d93cd20bc52bd776cbb14b32f7
SHA512

4a02a3c1da157a20bd5270f60f95f9e0bbf2ec0069f0519d378acc63b1757426337f43df2c373127c88da15247bb2666f8e244cf90fc6245323f07a2fafc8f58
SSDEEP

1536:13KBnQAAya0fCCZQvG+PNqnD0VaEoESg4K/:C5dDEkCSg4K/

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2832	ehcohoof.exe

Loads dropped DLL 1 IoCs

pid	Process
2656	27b6c06149899020c55528e0c35fb2911caf36d93cd20bc52bd776cbb14b32f7.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\ehcohoof.exe	27b6c06149899020c55528e0c35fb2911caf36d93cd20bc52bd776cbb14b32f7.exe
File created	C:\Windows\SysWOW64\ehcohoof.exe	27b6c06149899020c55528e0c35fb2911caf36d93cd20bc52bd776cbb14b32f7.exe

C:\Users\Admin\AppData\Local\Temp\27b6c06149899020c55528e0c35fb2911caf36d93cd20bc52bd776cbb14b32f7.exe
"C:\Users\Admin\AppData\Local\Temp\27b6c06149899020c55528e0c35fb2911caf36d93cd20bc52bd776cbb14b32f7.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2656
- C:\Windows\SysWOW64\ehcohoof.exe
  "C:\Windows\SysWOW64\ehcohoof.exe"
  2⤵
  - Executes dropped EXE
  PID:2832

\Windows\SysWOW64\ehcohoof.exe

Filesize
71KB

MD5
8d78af44478d683019603419e8196857

SHA1
164c182121404d1097fcce885bfe28ac2444a6c1

SHA256
b1500669e2f189e325f6bc52743d9055e699d9b6621cd437641dc189f3e107b0

SHA512
7efec58dc1ec3b80307daadff7d040f782606bcd96b8ce58e81f6d834c52f3513f0127e1e0b66af4f7a867cf4b4e7bb3854a214a1c063d0a982f45c18aaad571

Download Submit
memory/2656-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download