27778cca3d3121f8a6d6eb18f184fec5a6180ea37f2019df5e7463dfec0d81f4

Analysis

max time kernel
142s
max time network
129s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
14-07-2024 18:18

Target

SMP setup.exe
Size

196.6MB
MD5

927c1c98e8851a3d651cd0567490ff7a
SHA1

0d387869f07337eb3c8897834a3b89c2973165ae
SHA256

27778cca3d3121f8a6d6eb18f184fec5a6180ea37f2019df5e7463dfec0d81f4
SHA512

504585b11345765a0a6838f7de5078084efeba383b4d38556e714048451d91e35f2096c1c61030b31483a30afed88bd20fe85287866d5bfd5d5f71d398c47147
SSDEEP

3145728:2zNGszbqBKca0uR2UbLi2nDKafsCF953TnP6EU1U7j8w0oLxpAwWFLpjqDKCUDk:BTa1R2KiEzd953TP6Um4DAweqWZA

Score

7^/10

Executes dropped EXE 1 IoCs

Processes:

SMP setup.tmp

pid	Process
2676	SMP setup.tmp

Loads dropped DLL 3 IoCs

Processes:

SMP setup.exeSMP setup.tmp

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

SMP setup.tmp

pid	Process
2676	SMP setup.tmp

Suspicious use of WriteProcessMemory 7 IoCs

Processes:

SMP setup.exe

description	pid	Process	procid_target
PID 2416 wrote to memory of 2676	2416	SMP setup.exe	30
PID 2416 wrote to memory of 2676	2416	SMP setup.exe	30
PID 2416 wrote to memory of 2676	2416	SMP setup.exe	30
PID 2416 wrote to memory of 2676	2416	SMP setup.exe	30
PID 2416 wrote to memory of 2676	2416	SMP setup.exe	30
PID 2416 wrote to memory of 2676	2416	SMP setup.exe	30
PID 2416 wrote to memory of 2676	2416	SMP setup.exe	30

\Users\Admin\AppData\Local\Temp\is-8DEK0.tmp\SMP setup.tmp

Filesize
1.5MB

MD5
f1137b2a2cd2bd596117090d9f2da793

SHA1
f16c89642990d661c24eb7f5db3a410596ea72c9

SHA256
361352552d47e35f2aa17f0d866d75135810a49cd8170f0b4050cf283f95a39f

SHA512
dd942a0df586c0ef64e8a45669165906566028c31e987ca1946bb9b5f8283e049b2ce2a55dff018529a3290dd8067784399422bf0dcfb7418d18251f2177d087

Download Submit
\Users\Admin\AppData\Local\Temp\is-SJSJS.tmp\_isetup\_shfoldr.dll

Filesize
22KB

MD5
92dc6ef532fbb4a5c3201469a5b5eb63

SHA1
3e89ff837147c16b4e41c30d6c796374e0b8e62c

SHA256
9884e9d1b4f8a873ccbd81f8ad0ae257776d2348d027d811a56475e028360d87

SHA512
9908e573921d5dbc3454a1c0a6c969ab8a81cc2e8b5385391d46b1a738fb06a76aa3282e0e58d0d2ffa6f27c85668cd5178e1500b8a39b1bbae04366ae6a86d3

Download Submit
memory/2416-0-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download
memory/2416-2-0x0000000000401000-0x0000000000417000-memory.dmp

Filesize
88KB

Download
memory/2416-15-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download
memory/2676-10-0x0000000000400000-0x0000000000589000-memory.dmp

Filesize
1.5MB

Download
memory/2676-16-0x0000000000400000-0x0000000000589000-memory.dmp

Filesize
1.5MB

Download