5346fe0ee4404066689fd5f8909fca7d6fa5a37bf510a27a064409583ce97ad6

Resubmissions

27/09/2024, 01:07

26/09/2024, 22:39

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
26/09/2024, 22:39

Target

SideLoadly.exe
Size

7.5MB
MD5

6e49bc51b5d77c6f5dec92484c0261df
SHA1

795b5e7cbc30485f8c182de17c8d5cfad0a17e58
SHA256

5346fe0ee4404066689fd5f8909fca7d6fa5a37bf510a27a064409583ce97ad6
SHA512

b882cfff46278b422965844dbb920cc7008c6312299b38ac765fe9032976935e5a46d287329258762152bfb436f13f92caaba54cd5ca93b3f70b7d1d71ad0a50
SSDEEP

196608:CigVVEXwfI9jUC2gYBYv3vbW2+iITx1U6nv:SVVE8IH2gYBgDWJTnzv

Score

7^/10

upx

Loads dropped DLL 1 IoCs

pid	Process
2384	SideLoadly.exe

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/files/0x00060000000173aa-21.dat	upx
behavioral1/memory/2384-23-0x000007FEF5FF0000-0x000007FEF66B5000-memory.dmp	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1152 wrote to memory of 2384	1152	SideLoadly.exe	30
PID 1152 wrote to memory of 2384	1152	SideLoadly.exe	30
PID 1152 wrote to memory of 2384	1152	SideLoadly.exe	30

C:\Users\Admin\AppData\Local\Temp\SideLoadly.exe
"C:\Users\Admin\AppData\Local\Temp\SideLoadly.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1152
- C:\Users\Admin\AppData\Local\Temp\SideLoadly.exe
  "C:\Users\Admin\AppData\Local\Temp\SideLoadly.exe"
  2⤵
  - Loads dropped DLL
  PID:2384

C:\Users\Admin\AppData\Local\Temp\_MEI11522\python312.dll

Filesize
1.7MB

MD5
6f7c42579f6c2b45fe866747127aef09

SHA1
b9487372fe3ed61022e52cc8dbd37e6640e87723

SHA256
07642b6a3d99ce88cff790087ac4e2ba0b2da1100cf1897f36e096427b580ee5

SHA512
aadf06fd6b4e14f600b0a614001b8c31e42d71801adec7c9c177dcbb4956e27617fa45ba477260a7e06d2ca4979ed5acc60311258427ee085e8025b61452acec

Download Submit
memory/2384-23-0x000007FEF5FF0000-0x000007FEF66B5000-memory.dmp

Filesize
6.8MB

Download