e08629b64da23af97bbbbbbb3c8ff11c2f0572898e993224ec33ccb3680fe39f

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
26/07/2024, 04:29

Target

Infinity+Installer.exe
Size

31.3MB
MD5

da3cb7c46d95a87bd4e1af02b414662c
SHA1

56d893ff658365f2973bec9f46b4dfd8598fbcce
SHA256

e08629b64da23af97bbbbbbb3c8ff11c2f0572898e993224ec33ccb3680fe39f
SHA512

313ea2d6fc296cab5757b42581e6d5ec532572a46611fc290581bebec822d420e430249a76ab625fcccc6822071332f057907b23d410d136b79de7aebe97cfa5
SSDEEP

786432:mb9Z9Hcv/B7vDzdbWzcY8764SeoK8vCW8zVXIijPtImZ16cEE5IyLII:mBvHcv/B7v3dKE7xZjdW4Nj6uZoH

Score

7^/10

upx

Loads dropped DLL 1 IoCs

pid	Process
1516	Infinity+Installer.exe

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/files/0x000400000001ccb4-1114.dat	upx
behavioral1/memory/1516-1116-0x000007FEF5AE0000-0x000007FEF61A4000-memory.dmp	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2624 wrote to memory of 1516	2624	Infinity+Installer.exe	30
PID 2624 wrote to memory of 1516	2624	Infinity+Installer.exe	30
PID 2624 wrote to memory of 1516	2624	Infinity+Installer.exe	30

C:\Users\Admin\AppData\Local\Temp\Infinity+Installer.exe
"C:\Users\Admin\AppData\Local\Temp\Infinity+Installer.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2624
- C:\Users\Admin\AppData\Local\Temp\Infinity+Installer.exe
  "C:\Users\Admin\AppData\Local\Temp\Infinity+Installer.exe"
  2⤵
  - Loads dropped DLL
  PID:1516

C:\Users\Admin\AppData\Local\Temp\_MEI26242\python312.dll

Filesize
1.7MB

MD5
8f165bfadf970edafd59067ad45a3952

SHA1
16c1876f2233087156b49db35d4d935c6e17be6a

SHA256
22470af77229d53d9141823c12780db63c43703dd525940bc479730d2e43513d

SHA512
b3af95dc9a68e21e8eca98e451b935f72663c2552ebf26de299716f17193f238d55c292df953d641defcbcec3ea18eb37cd4b839800804efa8f40658427263ae

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI26242\wheel-0.43.0.dist-info\INSTALLER

Filesize
4B

MD5
365c9bfeb7d89244f2ce01c1de44cb85

SHA1
d7a03141d5d6b1e88b6b59ef08b6681df212c599

SHA256
ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508

SHA512
d220d322a4053d84130567d626a9f7bb2fb8f0b854da1621f001826dc61b0ed6d3f91793627e6f0ac2ac27aea2b986b6a7a63427f05fe004d8a2adfbdadc13c1

Download Submit
memory/1516-1116-0x000007FEF5AE0000-0x000007FEF61A4000-memory.dmp

Filesize
6.8MB

Download