13ed8672ba8f1fb7c2da5f71cd03045a0f5400050bb6ed664635858e11d03d28

Resubmissions

05/02/2025, 00:47

16/06/2024, 19:21

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
16/06/2024, 19:21

Target
Calani-AIO-v1.0.4-windows_x64.exe
Size 14.8MB
Sample240616-x2ncjsxfpl
SHA256 22ea372f8259e913bd62808a8651f16e3e576cb08dce509382631de36925c961
MD5 e7b5e8b5e8069760a36fa07ce62b046e
SHA1 cc6707e38d6c55f6f4f638efb61540a73415a410
SHA512 e9a28995fc3dd7d1bb9f85af6fd5f5807d279d8ec3e9bb5007b8563369ddfccbe90ec0e7fcaacefc9d06f05ef1e21867101c9408562e429657c2f4335d516d84
SSDEEP 393216:YqdQuslN/m3pqq9AJ4Yq3+d9VPV4aX49W8wi8/cwR:YqdQu4KhS4POd9ZF49W8wi8/hR
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
1160	Calani-AIO-v1.0.4-windows_x64.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1884 wrote to memory of 1160	1884	Calani-AIO-v1.0.4-windows_x64.exe	29
PID 1884 wrote to memory of 1160	1884	Calani-AIO-v1.0.4-windows_x64.exe	29
PID 1884 wrote to memory of 1160	1884	Calani-AIO-v1.0.4-windows_x64.exe	29

C:\Users\Admin\AppData\Local\Temp\Calani-AIO-v1.0.4-windows_x64.exe
"C:\Users\Admin\AppData\Local\Temp\Calani-AIO-v1.0.4-windows_x64.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1884
- C:\Users\Admin\AppData\Local\Temp\Calani-AIO-v1.0.4-windows_x64.exe
  "C:\Users\Admin\AppData\Local\Temp\Calani-AIO-v1.0.4-windows_x64.exe"
  2⤵
  - Loads dropped DLL
  PID:1160

python310.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI18842\python310.dll
Size 4.3MB
SHA256 156cf2b64dd0f4d9bdb346b654a11300d6e9e15a65ef69089923dafc1c71e33d
MD5 deaf0c0cc3369363b800d2e8e756a402
SHA1 3085778735dd8badad4e39df688139f4eed5f954
SHA512 5cac1d92af7ee18425b5ee8e7cd4e941a9ddffb4bc1c12bb8aeabeed09acec1ff0309abc41a2e0c8db101fee40724f8bfb27a78898128f8746c8fe01c1631989
SSDEEP 49152:m/4rIQeEKdN4uxzx1njuYWxKLx5NFnb7d1G2F58rkx7qzMJYlf1GCJLvNyoInO3V:mS7q35VNFnlRqT84NAnYHAMDlPK0r
MD5 SHA1 SHA512 SSDEEP

Submit Download