b898d8294125b6d5d661281c132c7675518cf5bef57b28f902fbdc97e5f05d66

Analysis

max time kernel
716s
max time network
723s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
20-07-2024 02:01

Target

Shark Predictor/Shark Predictor.exe
Size

6.8MB
MD5

94ebee0fc8692acb4b12cb40e0aba034
SHA1

f8a90ebc1fa203ec9c38a8cfa343f928c81abf5c
SHA256

7a6809d47c3ed09ef32544325c6ffb992f78119441ffe2ec69fb3caf9bb35ff2
SHA512

e6631670028e9e26f7aacd54a74b5a328edc5e3f3b4fc630f38a1680631b08a236bfe81a2ee6d326246ee47fa54a1fdee67fdd6dbaa69f9a65b8b2e47e41939c
SSDEEP

98304:kAkwN+MdA5wqMt98MMhJMjarJaon7JPzf+JiUCS3swhzqgez7DoDZDJ1n6hBnLng:kAV16B6ylnlPzf+JiJCsmFMvcn6hVvU

Score

7^/10

upx

Loads dropped DLL 1 IoCs

Processes:

Shark Predictor.exe

pid process

2892 Shark Predictor.exe

pid	process
2892	Shark Predictor.exe

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
C:\Users\Admin\AppData\Local\Temp\_MEI26122\python311.dll	upx

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

Shark Predictor.exe

description	pid	process	target process
PID 2612 wrote to memory of 2892	2612	Shark Predictor.exe	Shark Predictor.exe
PID 2612 wrote to memory of 2892	2612	Shark Predictor.exe	Shark Predictor.exe
PID 2612 wrote to memory of 2892	2612	Shark Predictor.exe	Shark Predictor.exe

C:\Users\Admin\AppData\Local\Temp\Shark Predictor\Shark Predictor.exe
"C:\Users\Admin\AppData\Local\Temp\Shark Predictor\Shark Predictor.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2612

C:\Users\Admin\AppData\Local\Temp\Shark Predictor\Shark Predictor.exe
"C:\Users\Admin\AppData\Local\Temp\Shark Predictor\Shark Predictor.exe"
2⤵
- Loads dropped DLL
PID:2892

C:\Users\Admin\AppData\Local\Temp\_MEI26122\python311.dll

Filesize
1.6MB

MD5
1e76961ca11f929e4213fca8272d0194

SHA1
e52763b7ba970c3b14554065f8c2404112f53596

SHA256
8a0c27f9e5b2efd54e41d7e7067d7cb1c6d23bae5229f6d750f89568566227b0

SHA512
ec6ed913e0142a98cd7f6adced5671334ec6545e583284ae10627162b199e55867d7cf28efeaadce9862c978b01c234a850288e529d2d3e2ac7dbbb99c6cde9b

Download Submit
memory/2892-23-0x000007FEF5A60000-0x000007FEF604A000-memory.dmp

Filesize
5.9MB

Download