d93deb945e938a47270d878db4618a35fcdda7045683bf5438dc1b44e5ef1c1d

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
21-11-2024 09:13

Target

d93deb945e938a47270d878db4618a35fcdda7045683bf5438dc1b44e5ef1c1d.exe
Size

71KB
MD5

3d79950da9e61446bd21a79b93cecb83
SHA1

31210a979a5d8724dbbd8bb3a6f540e5b5f1360a
SHA256

d93deb945e938a47270d878db4618a35fcdda7045683bf5438dc1b44e5ef1c1d
SHA512

cb9652e4cf7cbd76fe7d40100640b26cb5c25520f94ba4df990788ef6c7bea7576538238673a526d5164c9cf608130e163f4c02b2ae8924312c8cab7661ab044
SSDEEP

1536:13KBnQAAya0fCCZQvG+PNqnD0VaEoESg4mr:C5dDEkCSg4mr

Score

7^/10

Executes dropped EXE 1 IoCs

Processes:

mmoapot.exe

pid process

2664 mmoapot.exe
Loads dropped DLL 1 IoCs

Processes:

d93deb945e938a47270d878db4618a35fcdda7045683bf5438dc1b44e5ef1c1d.exe

pid process

2668 d93deb945e938a47270d878db4618a35fcdda7045683bf5438dc1b44e5ef1c1d.exe

pid	process
2664	mmoapot.exe

pid	process
2668	d93deb945e938a47270d878db4618a35fcdda7045683bf5438dc1b44e5ef1c1d.exe

Drops file in System32 directory 2 IoCs

Processes:

d93deb945e938a47270d878db4618a35fcdda7045683bf5438dc1b44e5ef1c1d.exe

description	ioc	process
File opened for modification	C:\Windows\SysWOW64\mmoapot.exe	d93deb945e938a47270d878db4618a35fcdda7045683bf5438dc1b44e5ef1c1d.exe
File created	C:\Windows\SysWOW64\mmoapot.exe	d93deb945e938a47270d878db4618a35fcdda7045683bf5438dc1b44e5ef1c1d.exe

C:\Users\Admin\AppData\Local\Temp\d93deb945e938a47270d878db4618a35fcdda7045683bf5438dc1b44e5ef1c1d.exe
"C:\Users\Admin\AppData\Local\Temp\d93deb945e938a47270d878db4618a35fcdda7045683bf5438dc1b44e5ef1c1d.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2668
- C:\Windows\SysWOW64\mmoapot.exe
  "C:\Windows\SysWOW64\mmoapot.exe"
  2⤵
  - Executes dropped EXE
  PID:2664

\Windows\SysWOW64\mmoapot.exe

Filesize
68KB

MD5
499f2c14f202b33ddaa3accae7477dc7

SHA1
3840eb7dcb5ab244e3408a98c4bdbdd58a81cf89

SHA256
39ca72f32a402b22424f818a02efadbbce5d108fedf4839d6ed9ded43222987f

SHA512
f34cb7b7dcf6edbb4e65de5f9e456c6e6fc6d8266fe74854ead8834896d8952beb0c6e41f1cc5e45cedef2a005582a1234d6af522d7574997940e7bdef16a091

Download Submit
memory/2668-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download