d5991aeed970446ffc4dea7d2248c6d2133b35cca0991caa1b1e939b1da608ba

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
14/09/2024, 02:09

Target

d5991aeed970446ffc4dea7d2248c6d2133b35cca0991caa1b1e939b1da608ba.exe
Size

72KB
MD5

3b83673ccb147a13cbe044e58079bb4c
SHA1

fed894e53a2bd83c01ab35ac4bf2982ae7b90653
SHA256

d5991aeed970446ffc4dea7d2248c6d2133b35cca0991caa1b1e939b1da608ba
SHA512

e1b3686814f6676406ce600872f16971311db95266d73c409c3fe4d7e668d612f48888574a34c50622778868af422469f81c0583df868e46c5605829b5f632e4
SSDEEP

768:hZZ6Zyf9DevU3u+VNDkC0H9ALW/Z0dPWyYzTnLlNey1GJrDKkHMKejknCMBuQDXe:1m8XDkBdUWcnYvnLl7PkHMFGu4XtBni

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2056	ofhoacup-ufoot.exe

Loads dropped DLL 1 IoCs

pid	Process
1984	d5991aeed970446ffc4dea7d2248c6d2133b35cca0991caa1b1e939b1da608ba.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\ofhoacup-ufoot.exe	d5991aeed970446ffc4dea7d2248c6d2133b35cca0991caa1b1e939b1da608ba.exe
File created	C:\Windows\SysWOW64\ofhoacup-ufoot.exe	d5991aeed970446ffc4dea7d2248c6d2133b35cca0991caa1b1e939b1da608ba.exe

C:\Users\Admin\AppData\Local\Temp\d5991aeed970446ffc4dea7d2248c6d2133b35cca0991caa1b1e939b1da608ba.exe
"C:\Users\Admin\AppData\Local\Temp\d5991aeed970446ffc4dea7d2248c6d2133b35cca0991caa1b1e939b1da608ba.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:1984
- C:\Windows\SysWOW64\ofhoacup-ufoot.exe
  "C:\Windows\SysWOW64\ofhoacup-ufoot.exe"
  2⤵
  - Executes dropped EXE
  PID:2056

\Windows\SysWOW64\ofhoacup-ufoot.exe

Filesize
69KB

MD5
8ccc80902ed1523f619c22de228dff6f

SHA1
2d0fb8b2bafae5fdd725bec61431a84d27dba177

SHA256
0701000bca9e2638ac2a1d21079a1dd012d499e7874e991fe9eb91f9567dcaa3

SHA512
aca5ba557d7230c8f9e226541188cf9b1f8b534eecb5e09c10c7b0fff598f595baff6ef82c811aa2e04aec4ea99153228adc408c6bea6e10b5131bde4eba5b86

Download Submit
memory/1984-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download