39ede861f87b3f423931768d41395acb3bd4112470c30812387dbd24428bec7f

Analysis

max time kernel
16s
max time network
17s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
11-07-2024 18:51

Target

Lost.exe
Size

13.5MB
MD5

424379a523bfc83fd9d1d49ee77646e2
SHA1

88fb369aae68939600323ddfefd8dcbf77661c5a
SHA256

39ede861f87b3f423931768d41395acb3bd4112470c30812387dbd24428bec7f
SHA512

6b63c07d5a50ea38cdaf6792c58b010abe158cc9abb36b9fa39dc8f13dd357d24829c1221e442681a5874680f6d206309058be235742e9d0bfa503ca8950388c
SSDEEP

196608:nuEkwAc749UERBA1HeT39IigwE1ncKOVVtd97t86OkpPtQBN+j9WBsBTlqx5Kx:uEkwAck5q1+TtIiFg0VBxtXtR6ijEjS

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
2636	Lost.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2260 wrote to memory of 2636	2260	Lost.exe	30
PID 2260 wrote to memory of 2636	2260	Lost.exe	30
PID 2260 wrote to memory of 2636	2260	Lost.exe	30

C:\Users\Admin\AppData\Local\Temp\Lost.exe
"C:\Users\Admin\AppData\Local\Temp\Lost.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2260
- C:\Users\Admin\AppData\Local\Temp\Lost.exe
  "C:\Users\Admin\AppData\Local\Temp\Lost.exe"
  2⤵
  - Loads dropped DLL
  PID:2636

C:\Users\Admin\AppData\Local\Temp\_MEI22602\python312.dll

Filesize
6.6MB

MD5
d521654d889666a0bc753320f071ef60

SHA1
5fd9b90c5d0527e53c199f94bad540c1e0985db6

SHA256
21700f0bad5769a1b61ea408dc0a140ffd0a356a774c6eb0cc70e574b929d2e2

SHA512
7a726835423a36de80fb29ef65dfe7150bd1567cac6f3569e24d9fe091496c807556d0150456429a3d1a6fd2ed0b8ae3128ea3b8674c97f42ce7c897719d2cd3

Download Submit