08854fda94eb254f421f438d241c4c1c2e10d34e9927b9338b3c300c7e43f1b9

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
30-10-2024 15:45

Target

SpotifyStreamingBotV1.4.2.exe
Size

33.0MB
MD5

1997cecd1aa2b07486b6b468f873c94c
SHA1

44df2f1289d6ece25084ad2500d28ba821de923b
SHA256

08854fda94eb254f421f438d241c4c1c2e10d34e9927b9338b3c300c7e43f1b9
SHA512

bb44f31b74815dd956fee77d56ddade5f4ae86b4932ad3e5f5a745c8ad2129a2d2e2e320288dcefd1b15f056595524bfe1d2dcac876584a89cc785c752a89d4a
SSDEEP

786432:GFWVtElTxQW1iJuBnIesJz/7GuBDTVnBB+WTN:AgxWg+VsQiBBBD

Score

7^/10

upx

Loads dropped DLL 1 IoCs

pid	Process
3032	SpotifyStreamingBotV1.4.2.exe

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/files/0x00050000000194d4-22.dat	upx
behavioral1/memory/3032-24-0x000007FEF6960000-0x000007FEF7025000-memory.dmp	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2352 wrote to memory of 3032	2352	SpotifyStreamingBotV1.4.2.exe	30
PID 2352 wrote to memory of 3032	2352	SpotifyStreamingBotV1.4.2.exe	30
PID 2352 wrote to memory of 3032	2352	SpotifyStreamingBotV1.4.2.exe	30

C:\Users\Admin\AppData\Local\Temp\SpotifyStreamingBotV1.4.2.exe
"C:\Users\Admin\AppData\Local\Temp\SpotifyStreamingBotV1.4.2.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2352
- C:\Users\Admin\AppData\Local\Temp\SpotifyStreamingBotV1.4.2.exe
  "C:\Users\Admin\AppData\Local\Temp\SpotifyStreamingBotV1.4.2.exe"
  2⤵
  - Loads dropped DLL
  PID:3032

C:\Users\Admin\AppData\Local\Temp\_MEI23522\python312.dll

Filesize
1.7MB

MD5
6f7c42579f6c2b45fe866747127aef09

SHA1
b9487372fe3ed61022e52cc8dbd37e6640e87723

SHA256
07642b6a3d99ce88cff790087ac4e2ba0b2da1100cf1897f36e096427b580ee5

SHA512
aadf06fd6b4e14f600b0a614001b8c31e42d71801adec7c9c177dcbb4956e27617fa45ba477260a7e06d2ca4979ed5acc60311258427ee085e8025b61452acec

Download Submit
memory/2352-47-0x000000013F750000-0x000000013F77C000-memory.dmp

Filesize
176KB

Download
memory/3032-24-0x000007FEF6960000-0x000007FEF7025000-memory.dmp

Filesize
6.8MB

Download
memory/3032-25-0x000000013F750000-0x000000013F77C000-memory.dmp

Filesize
176KB

Download