471bd211afef697614a53e7b5ec87a6dce19fb906b1b69656f967e4e6510e2ca

Analysis

max time kernel
92s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
13/05/2024, 20:57

Target

471bd211afef697614a53e7b5ec87a6dce19fb906b1b69656f967e4e6510e2ca.exe
Size

71KB
MD5

4b27774314bd8c22c9ceed03214d382c
SHA1

2fd97a57abd890437d3a4dc4ced53c32322bd71a
SHA256

471bd211afef697614a53e7b5ec87a6dce19fb906b1b69656f967e4e6510e2ca
SHA512

7f477794e979bc7378701bba05ca2dcdef80df5e3a7b1595408ce627c21a5569c67eaadebf6c7bdcb7daa638184ca1065d5a10578216e636943bcafe24929098
SSDEEP

1536:1l52iwhqb1tqObPvZkcUbSpx7/wteyNjJ:P0PhqZ/TvZtYSXceKl

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2996	mreacub.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\mreacub.exe	471bd211afef697614a53e7b5ec87a6dce19fb906b1b69656f967e4e6510e2ca.exe
File created	C:\Windows\SysWOW64\mreacub.exe	471bd211afef697614a53e7b5ec87a6dce19fb906b1b69656f967e4e6510e2ca.exe

C:\Users\Admin\AppData\Local\Temp\471bd211afef697614a53e7b5ec87a6dce19fb906b1b69656f967e4e6510e2ca.exe
"C:\Users\Admin\AppData\Local\Temp\471bd211afef697614a53e7b5ec87a6dce19fb906b1b69656f967e4e6510e2ca.exe"
1⤵
- Drops file in System32 directory
PID:2880
- C:\Windows\SysWOW64\mreacub.exe
  "C:\Windows\SysWOW64\mreacub.exe"
  2⤵
  - Executes dropped EXE
  PID:2996

C:\Windows\SysWOW64\mreacub.exe

Filesize
68KB

MD5
6a318b5520226232d6f04e43377087b0

SHA1
2c927a87b0a8139c1b1b7727dffdb75cdc44d532

SHA256
32886ea512f6d8eb6761db192c920a0c13a6953add539db9c374d71a57eaad38

SHA512
546762dce264597429401a048c6191e4571614e0a2714f9ad246464cd5e93bbf037f1f5928e0dbd96157cde1ce93e501ca26b026b7fe8743d755ed4e2f6c6d27

Download Submit
memory/2880-0-0x0000000077A32000-0x0000000077A33000-memory.dmp

Filesize
4KB

Download
memory/2880-4-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download