36a6eb4bb8ea36dab0122203228191294f51ea4e9024f75eca34d230a03957c0

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 20:41

Target

36a6eb4bb8ea36dab0122203228191294f51ea4e9024f75eca34d230a03957c0.exe
Size

73KB
MD5

08c040581936e4911991367083f5e3b0
SHA1

167d3f5f84aaf2411ee6df0fe92168cadfeb8677
SHA256

36a6eb4bb8ea36dab0122203228191294f51ea4e9024f75eca34d230a03957c0
SHA512

ac72546b6951c40126359f3cd61c8347f30705a0a4ee1ed1c771451b46c7a417651e17faea8ffe3170be4ff1c8b9ee07967c863764163277040645a52a7ad8fa
SSDEEP

1536:1cbNMI05ZPS2u30T8m99zfC5dhPIBUCwJLN9SZui1ZOm8:WMIqu30T8mf+P+UCwJB9Sh1ZOJ

Score

7^/10

Executes dropped EXE 1 IoCs

Processes:

tmotoos.exe

pid process

3452 tmotoos.exe

pid	process
3452	tmotoos.exe

Drops file in System32 directory 2 IoCs

Processes:

36a6eb4bb8ea36dab0122203228191294f51ea4e9024f75eca34d230a03957c0.exe

description	ioc	process
File opened for modification	C:\Windows\SysWOW64\tmotoos.exe	36a6eb4bb8ea36dab0122203228191294f51ea4e9024f75eca34d230a03957c0.exe
File created	C:\Windows\SysWOW64\tmotoos.exe	36a6eb4bb8ea36dab0122203228191294f51ea4e9024f75eca34d230a03957c0.exe

C:\Users\Admin\AppData\Local\Temp\36a6eb4bb8ea36dab0122203228191294f51ea4e9024f75eca34d230a03957c0.exe
"C:\Users\Admin\AppData\Local\Temp\36a6eb4bb8ea36dab0122203228191294f51ea4e9024f75eca34d230a03957c0.exe"
1⤵
- Drops file in System32 directory
PID:1196

C:\Windows\SysWOW64\tmotoos.exe
"C:\Windows\SysWOW64\tmotoos.exe"
2⤵
- Executes dropped EXE
PID:3452

C:\Windows\SysWOW64\tmotoos.exe

Filesize
70KB

MD5
cf95105df662e8b4feb65aa673c116b0

SHA1
86bf1e79fe09a72f94fdd8ef01c020efc9267892

SHA256
e96919ee12060cf72b8e574ab17dc52bfe0209b311be8cb34ec926ca5f1831ea

SHA512
c8dd5c83763b5fb7e783f0b2be0e9f2ce4e25b0872f9f411c3ad0a20977ecd24b0dbbc4c5a4adf110aa2534a8982e3044a7c0434d7f59510fc77990f7351e803

Download Submit
memory/1196-1-0x0000000077DB2000-0x0000000077DB3000-memory.dmp

Filesize
4KB

Download
memory/1196-4-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download