1de3091a03c2257471d993468dce83884707f8aa7cafccec6e8d4794ed19fa64

Analysis

max time kernel
201s
max time network
198s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
09-07-2024 20:00

Target

CelexV2.exe
Size

9.9MB
MD5

dc8fa84f708a65dd2aa450a8b2c47a13
SHA1

1632020b670e36d6b17c030796c6992d5841cbe1
SHA256

1de3091a03c2257471d993468dce83884707f8aa7cafccec6e8d4794ed19fa64
SHA512

6239edd353e5f93125ae9a7a2e9537ef64d784d53a450796f562cd4573060efd02a7126642a239b20caabf3253cc774ed5a2cf0e2f6d284c4244ebb9e1be7542
SSDEEP

196608:3vEkh1kb5RYqQ1W903eV4QRM993iObMAR1jQmGYuuLmbrig91P+kl:/Ekh2FG1W+eGQRe93iObLRS/MLOriMnl

Score

7^/10

Loads dropped DLL 2 IoCs

pid	Process
1208	CelexV2.exe
1608	CelexV2.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 3064 wrote to memory of 1208	3064	CelexV2.exe	28
PID 3064 wrote to memory of 1208	3064	CelexV2.exe	28
PID 3064 wrote to memory of 1208	3064	CelexV2.exe	28
PID 2924 wrote to memory of 1608	2924	CelexV2.exe	34
PID 2924 wrote to memory of 1608	2924	CelexV2.exe	34
PID 2924 wrote to memory of 1608	2924	CelexV2.exe	34

C:\Users\Admin\AppData\Local\Temp\CelexV2.exe
"C:\Users\Admin\AppData\Local\Temp\CelexV2.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3064
- C:\Users\Admin\AppData\Local\Temp\CelexV2.exe
  "C:\Users\Admin\AppData\Local\Temp\CelexV2.exe"
  2⤵
  - Loads dropped DLL
  PID:1208

C:\Windows\system32\verclsid.exe
"C:\Windows\system32\verclsid.exe" /S /C {0B2C9183-C9FA-4C53-AE21-C900B0C39965} /I {0C733A8A-2A1C-11CE-ADE5-00AA0044773D} /X 0x401
1⤵
PID:1548

C:\Users\Admin\AppData\Local\Temp\CelexV2.exe
"C:\Users\Admin\AppData\Local\Temp\CelexV2.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2924
- C:\Users\Admin\AppData\Local\Temp\CelexV2.exe
  "C:\Users\Admin\AppData\Local\Temp\CelexV2.exe"
  2⤵
  - Loads dropped DLL
  PID:1608

C:\Users\Admin\AppData\Local\Temp\_MEI30642\python311.dll

Filesize
5.5MB

MD5
65e381a0b1bc05f71c139b0c7a5b8eb2

SHA1
7c4a3adf21ebcee5405288fc81fc4be75019d472

SHA256
53a969094231b9032abe4148939ce08a3a4e4b30b0459fc7d90c89f65e8dcd4a

SHA512
4db465ef927dfb019ab6faec3a3538b0c3a8693ea3c2148fd16163bf31c03c899dfdf350c31457edf64e671e3cc3e46851f32f0f84b267535bebc4768ef53d39

Download Submit