0e3c7e96b8ef1a6bb2f949d0e5f505e88fbab0555b117f2846b37fde5769a5bd

Analysis

max time kernel
92s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
21-05-2024 20:56

Target

0e3c7e96b8ef1a6bb2f949d0e5f505e88fbab0555b117f2846b37fde5769a5bd.exe
Size

74KB
MD5

2149a9216a6a79c97ae31c1fcd1feb60
SHA1

13b59a7e379db5af8bd6db417f0b790da6be7f27
SHA256

0e3c7e96b8ef1a6bb2f949d0e5f505e88fbab0555b117f2846b37fde5769a5bd
SHA512

f56073106c2b69938b1ffbacde9ee34053ae61fe909ab112fd3a8392f39924dca725a489afec74805e08135550b19cee705d75e560cb9cc985a955abf96d4ce5
SSDEEP

1536:1K7ylw2jlA6WBRCJKObnTNBbJ6I4WMJvdDlQDhI5erKT3FgOv:c7H6rbTNSImvplQVIQ0gM

Score

7^/10

Executes dropped EXE 1 IoCs

Processes:

ikkegug-eamac.exe

pid process

4296 ikkegug-eamac.exe

pid	process
4296	ikkegug-eamac.exe

Drops file in System32 directory 2 IoCs

Processes:

0e3c7e96b8ef1a6bb2f949d0e5f505e88fbab0555b117f2846b37fde5769a5bd.exe

description	ioc	process
File opened for modification	C:\Windows\SysWOW64\ikkegug-eamac.exe	0e3c7e96b8ef1a6bb2f949d0e5f505e88fbab0555b117f2846b37fde5769a5bd.exe
File created	C:\Windows\SysWOW64\ikkegug-eamac.exe	0e3c7e96b8ef1a6bb2f949d0e5f505e88fbab0555b117f2846b37fde5769a5bd.exe

C:\Users\Admin\AppData\Local\Temp\0e3c7e96b8ef1a6bb2f949d0e5f505e88fbab0555b117f2846b37fde5769a5bd.exe
"C:\Users\Admin\AppData\Local\Temp\0e3c7e96b8ef1a6bb2f949d0e5f505e88fbab0555b117f2846b37fde5769a5bd.exe"
1⤵
- Drops file in System32 directory
PID:392

C:\Windows\SysWOW64\ikkegug-eamac.exe
"C:\Windows\SysWOW64\ikkegug-eamac.exe"
2⤵
- Executes dropped EXE
PID:4296

C:\Windows\SysWOW64\ikkegug-eamac.exe
Filesize
71KB

MD5
6c8202d262b9e211813f2c7c26ae6440

SHA1
4fcd8ee33bd532a028e1ee8e5760f99e154e17f4

SHA256
a900257c1b3d95ee313d469b47c8cdda6953e855e700e8cbfa5c9bd5e164cc75

SHA512
cdf82112e4f66d822ae14cfda9b46b335e62462bc282fa6c4afe919b6d14dd4bf37cb2d5fa4afc8c56fe6237ffff56dd19a41b5d6402a6df3cdf7346007cff1b

Download Submit
memory/392-3-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/392-4-0x0000000077942000-0x0000000077943000-memory.dmp

Filesize
4KB

Download