6c339420686f11db54c11b87a93de165562d96256c95efac936a17b7b00021a8

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
13/05/2024, 22:27

Target

6c339420686f11db54c11b87a93de165562d96256c95efac936a17b7b00021a8.exe
Size

73KB
MD5

a1feade958c3dd8243eebd06e6516b57
SHA1

4c4ebaa7bedd012745fe0b33f6fc36ce0886549f
SHA256

6c339420686f11db54c11b87a93de165562d96256c95efac936a17b7b00021a8
SHA512

832038ca14f22fa4679ab3084b5fec540305944c4bfa020607ae8aa4ae2cebd6f8a789f8cf87fd46a6ce7cd81d8088c5487a5c7211fd62e751f03615df43f7f8
SSDEEP

768:hZZ6Zyf9ei1kK4GJrydY8O8oM+9asPW+JXr7QILPcMLopRgVdfbII8CQ7QHt08FB:14K8Y1XVVkgVdrI7Q3FIskXJT0

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2076	ogrohip-ivoot.exe

Loads dropped DLL 1 IoCs

pid	Process
2856	6c339420686f11db54c11b87a93de165562d96256c95efac936a17b7b00021a8.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\ogrohip-ivoot.exe	6c339420686f11db54c11b87a93de165562d96256c95efac936a17b7b00021a8.exe
File created	C:\Windows\SysWOW64\ogrohip-ivoot.exe	6c339420686f11db54c11b87a93de165562d96256c95efac936a17b7b00021a8.exe

C:\Users\Admin\AppData\Local\Temp\6c339420686f11db54c11b87a93de165562d96256c95efac936a17b7b00021a8.exe
"C:\Users\Admin\AppData\Local\Temp\6c339420686f11db54c11b87a93de165562d96256c95efac936a17b7b00021a8.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2856
- C:\Windows\SysWOW64\ogrohip-ivoot.exe
  "C:\Windows\SysWOW64\ogrohip-ivoot.exe"
  2⤵
  - Executes dropped EXE
  PID:2076

\Windows\SysWOW64\ogrohip-ivoot.exe

Filesize
70KB

MD5
3058b7c14be77c16056851d27b10c06c

SHA1
2e9540f6a997f22ff41560bb98d12fa9014631b6

SHA256
154736636b53bbf63a8d8daa9679529f53e565a516357b2ea8ce93ea50f9f0bf

SHA512
e4675079d8495f2ac79751264d269a718bf6a759f6fe2c40b4b55812607af76baaa1f43a826b63df876fe7ef9853f65d007f4be870030518e66741858ac00a92

Download Submit
memory/2856-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download