6c339420686f11db54c11b87a93de165562d96256c95efac936a17b7b00021a8

Analysis

max time kernel
125s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
13-05-2024 22:27

Target

6c339420686f11db54c11b87a93de165562d96256c95efac936a17b7b00021a8.exe
Size

73KB
MD5

a1feade958c3dd8243eebd06e6516b57
SHA1

4c4ebaa7bedd012745fe0b33f6fc36ce0886549f
SHA256

6c339420686f11db54c11b87a93de165562d96256c95efac936a17b7b00021a8
SHA512

832038ca14f22fa4679ab3084b5fec540305944c4bfa020607ae8aa4ae2cebd6f8a789f8cf87fd46a6ce7cd81d8088c5487a5c7211fd62e751f03615df43f7f8
SSDEEP

768:hZZ6Zyf9ei1kK4GJrydY8O8oM+9asPW+JXr7QILPcMLopRgVdfbII8CQ7QHt08FB:14K8Y1XVVkgVdrI7Q3FIskXJT0

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
1264	ogrohip-ivoot.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\ogrohip-ivoot.exe	6c339420686f11db54c11b87a93de165562d96256c95efac936a17b7b00021a8.exe
File created	C:\Windows\SysWOW64\ogrohip-ivoot.exe	6c339420686f11db54c11b87a93de165562d96256c95efac936a17b7b00021a8.exe

C:\Users\Admin\AppData\Local\Temp\6c339420686f11db54c11b87a93de165562d96256c95efac936a17b7b00021a8.exe
"C:\Users\Admin\AppData\Local\Temp\6c339420686f11db54c11b87a93de165562d96256c95efac936a17b7b00021a8.exe"
1⤵
- Drops file in System32 directory
PID:672
- C:\Windows\SysWOW64\ogrohip-ivoot.exe
  "C:\Windows\SysWOW64\ogrohip-ivoot.exe"
  2⤵
  - Executes dropped EXE
  PID:1264

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4080,i,5711962389779687290,1245653010537220991,262144 --variations-seed-version --mojo-platform-channel-handle=3772 /prefetch:8
1⤵
PID:2776

C:\Windows\SysWOW64\ogrohip-ivoot.exe

Filesize
70KB

MD5
3058b7c14be77c16056851d27b10c06c

SHA1
2e9540f6a997f22ff41560bb98d12fa9014631b6

SHA256
154736636b53bbf63a8d8daa9679529f53e565a516357b2ea8ce93ea50f9f0bf

SHA512
e4675079d8495f2ac79751264d269a718bf6a759f6fe2c40b4b55812607af76baaa1f43a826b63df876fe7ef9853f65d007f4be870030518e66741858ac00a92

Download Submit
memory/672-1-0x0000000077D22000-0x0000000077D23000-memory.dmp

Filesize
4KB

Download
memory/672-4-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download