2dab4d1462415c4d8a85b4c063d8110dd161f540298b522e0e71692abe063d92

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
05-07-2024 02:33

Target

2dab4d1462415c4d8a85b4c063d8110dd161f540298b522e0e71692abe063d92.exe
Size

177KB
MD5

57034b07de2021f0b01f576da590e960
SHA1

d5308ffcbd3d207c39b3211766f0db47b78d4794
SHA256

2dab4d1462415c4d8a85b4c063d8110dd161f540298b522e0e71692abe063d92
SHA512

14227b946068767a5b743bd8133d17a67bbe68c112d79c1b4c932e4d131d8082a2f10fab44f916bc827a4767e98d21faebbd1327eb4b2df5021490a879ecad3a
SSDEEP

1536:W7Z9pApQESOHepOHe8G+6E65dyGdykNdNBK2LUf7XQ27XQz7Z9pApQESOHepOHe8:69WpQE0zUzXZXK9WpQE0zUzXZXv

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
2468	2dab4d1462415c4d8a85b4c063d8110dd161f540298b522e0e71692abe063d92.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\Zombie.exe	2dab4d1462415c4d8a85b4c063d8110dd161f540298b522e0e71692abe063d92.exe
File opened for modification	C:\Windows\SysWOW64\Zombie.exe	2dab4d1462415c4d8a85b4c063d8110dd161f540298b522e0e71692abe063d92.exe

C:\Users\Admin\AppData\Local\Temp\2dab4d1462415c4d8a85b4c063d8110dd161f540298b522e0e71692abe063d92.exe
"C:\Users\Admin\AppData\Local\Temp\2dab4d1462415c4d8a85b4c063d8110dd161f540298b522e0e71692abe063d92.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2468
- C:\Windows\SysWOW64\Zombie.exe
  "C:\Windows\system32\Zombie.exe"
  2⤵
  PID:1996

\Windows\SysWOW64\Zombie.exe

Filesize
89KB

MD5
5f3b011cedfecb449ddb5da6cb16b03e

SHA1
118fef373e979a806a4e136e05e03d66723f7a86

SHA256
b6869da004b622555104a7d5324c9235d345c29aea7a7bd7fce345fb0e74e964

SHA512
779333af6235e4e40e8f4f52d1d588a33639d18d6610669847e22ef2c181aa1252d093cf6cf1def05843fd3cde06ad5faf3dd90e6b7982b87a32c934e81599ea

Download Submit