d8cd420c285b61c0ee266eb1542414ba1731b4959eb5dd9c4888d838872a7871

Analysis

max time kernel
133s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
16/05/2024, 04:02

Target

d8cd420c285b61c0ee266eb1542414ba1731b4959eb5dd9c4888d838872a7871.exe
Size

74KB
MD5

a8f4232fd8a8ce21c0a00af63f4ea3a4
SHA1

6d41813a957a1c92ad5d4946e36fafadee20dd32
SHA256

d8cd420c285b61c0ee266eb1542414ba1731b4959eb5dd9c4888d838872a7871
SHA512

adb1654a7fe1f9efe244bd088f335d55bd4d287870cb7766d3215c7ca6d6a05a0b30587d1c71594330bad18d60c4df1d1ba15c4c4cb4d2863e31fe8c4112a94b
SSDEEP

768:hZZ6Zyf9IsOotoORa9BtsKq59qixs6LD908odASouD/7Vs6U2Y6AdYLSQhOUul8+:1sxd9IKubv9svDzhkiLSQoUulHei26j

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
1972	atfeamon-deab.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\atfeamon-deab.exe	d8cd420c285b61c0ee266eb1542414ba1731b4959eb5dd9c4888d838872a7871.exe
File created	C:\Windows\SysWOW64\atfeamon-deab.exe	d8cd420c285b61c0ee266eb1542414ba1731b4959eb5dd9c4888d838872a7871.exe

C:\Users\Admin\AppData\Local\Temp\d8cd420c285b61c0ee266eb1542414ba1731b4959eb5dd9c4888d838872a7871.exe
"C:\Users\Admin\AppData\Local\Temp\d8cd420c285b61c0ee266eb1542414ba1731b4959eb5dd9c4888d838872a7871.exe"
1⤵
- Drops file in System32 directory
PID:2432
- C:\Windows\SysWOW64\atfeamon-deab.exe
  "C:\Windows\SysWOW64\atfeamon-deab.exe"
  2⤵
  - Executes dropped EXE
  PID:1972

C:\Windows\SysWOW64\atfeamon-deab.exe

Filesize
70KB

MD5
d7b0c2473bfdc22640d2bf5785c3768c

SHA1
bbb48fe2344d8eca85d58be45df42ba2d91963ad

SHA256
4eba98736be66b98cd4ced8dfabd3672c362373b210bd4ceb51e9553ed59485b

SHA512
98e8701e0a2193dbd14879df41289dad688c923118823065f93234426bdd12dae8c55c4a7cfa5bc730bdf47fe91c37d247d471d7ad39db5a579902e373fee2f5

Download Submit
memory/2432-2-0x0000000076EE2000-0x0000000076EE3000-memory.dmp

Filesize
4KB

Download
memory/2432-4-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download