6a7ea11077342bf118da94546d7c1707e99add24cc89dfd9915e65e54d58de04

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
05-10-2024 18:01

Target

KRONIXSOLUTIONS 16.0.exe
Size

12.0MB
MD5

625c58f8edb48067902abea77ea23689
SHA1

cbb5c8b40d13412adcfa46442fea3bae3b204ddd
SHA256

6a7ea11077342bf118da94546d7c1707e99add24cc89dfd9915e65e54d58de04
SHA512

22fd2022f379afc873b58d971fbe5882e459b33f06d00be5d3faf65727eef5aaee80e778100453743f1fe6d097bb0c54bcde0ba5739d0123cac64bfa6e691436
SSDEEP

98304:+CEtdFBgdqpy8EamaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzQgsRuGK4RaBM3H3usTy:+JFPeN/FJMIDJf0gsAGK4Rau3pTT+

Score

7^/10

upx

Loads dropped DLL 1 IoCs

pid	Process
2352	KRONIXSOLUTIONS 16.0.exe

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/files/0x0005000000019d3d-21.dat	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2208 wrote to memory of 2352	2208	KRONIXSOLUTIONS 16.0.exe	31
PID 2208 wrote to memory of 2352	2208	KRONIXSOLUTIONS 16.0.exe	31
PID 2208 wrote to memory of 2352	2208	KRONIXSOLUTIONS 16.0.exe	31

C:\Users\Admin\AppData\Local\Temp\KRONIXSOLUTIONS 16.0.exe
"C:\Users\Admin\AppData\Local\Temp\KRONIXSOLUTIONS 16.0.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2208
- C:\Users\Admin\AppData\Local\Temp\KRONIXSOLUTIONS 16.0.exe
  "C:\Users\Admin\AppData\Local\Temp\KRONIXSOLUTIONS 16.0.exe"
  2⤵
  - Loads dropped DLL
  PID:2352

C:\Users\Admin\AppData\Local\Temp\_MEI22082\python310.dll

Filesize
1.4MB

MD5
178a0f45fde7db40c238f1340a0c0ec0

SHA1
dcd2d3d14e06da3e8d7dc91a69b5fd785768b5fe

SHA256
9fcb5ad15bd33dd72122a171a5d950e8e47ceda09372f25df828010cde24b8ed

SHA512
4b790046787e57b9414a796838a026b1530f497a75c8e62d62b56f8c16a0cbedbefad3d4be957bc18379f64374d8d3bf62d3c64b53476c7c5005a7355acd2cee

Download Submit
memory/2352-23-0x000007FEF5960000-0x000007FEF5DCE000-memory.dmp

Filesize
4.4MB

Download