44a323578d2e192944b05a8b98d447142a8af08c0af52451d986477697ff6253

Resubmissions

18-08-2024 03:21

max time kernel
16s
max time network
16s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
18-08-2024 03:21

Target

Drip_Lite.exe
Size

16.0MB
MD5

aaf018a6380e63af117c7c9f053118e5
SHA1

33385a397ae47f098b3e23dc825f9838583d7cd5
SHA256

cfd08ee4956e067f5283276f0cbe640d8984ce16fcbfcf0efdd0fa94e2d98328
SHA512

899b4e015cb70894e66c85544e1b418797e67929bf485b3ef0c1ca9fed1859dbfbfad177e790a9ce06bab8ad01f65cbbae1e77150ffbc1111de63c8fa1f04dea
SSDEEP

393216:4AXGD2ntpUTLfhJsW+eGQRCMTozGxu8C0ibfz6e5SR1bLXiWCNi:4A2DaHUTLJSW+e5RLoztZ026e5qKVNi

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
2540	Drip_Lite.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2120 wrote to memory of 2540	2120	Drip_Lite.exe	31
PID 2120 wrote to memory of 2540	2120	Drip_Lite.exe	31
PID 2120 wrote to memory of 2540	2120	Drip_Lite.exe	31

C:\Users\Admin\AppData\Local\Temp\Drip_Lite.exe
"C:\Users\Admin\AppData\Local\Temp\Drip_Lite.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2120
- C:\Users\Admin\AppData\Local\Temp\Drip_Lite.exe
  "C:\Users\Admin\AppData\Local\Temp\Drip_Lite.exe"
  2⤵
  - Loads dropped DLL
  PID:2540

C:\Users\Admin\AppData\Local\Temp\_MEI21202\python312.dll

Filesize
6.7MB

MD5
48ebfefa21b480a9b0dbfc3364e1d066

SHA1
b44a3a9b8c585b30897ddc2e4249dfcfd07b700a

SHA256
0cc4e557972488eb99ea4aeb3d29f3ade974ef3bcd47c211911489a189a0b6f2

SHA512
4e6194f1c55b82ee41743b35d749f5d92a955b219decacf9f1396d983e0f92ae02089c7f84a2b8296a3062afa3f9c220da9b7cd9ed01b3315ea4a953b4ecc6ce

Download Submit