4a74d1c4d9610181fa7700c9e6d21ddfd39bac64387d1675c39fec265804f3fa

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
14-12-2024 21:00

Target

TZEternal.exe
Size

6.8MB
MD5

bc4c230eb26e394a3d0ff8eee8c11356
SHA1

3e8ccec82b05abfd2a1d4cc5e55332fa2c509c05
SHA256

4a74d1c4d9610181fa7700c9e6d21ddfd39bac64387d1675c39fec265804f3fa
SHA512

3f7e5997ba36123190289269da6112548e1eb9ca6a13a995dace50ee8b508d61df898b7841f7ceca45cfe4f0162ec41c70fdcedaafa9ddfdbc0fad6e66cdf5b7
SSDEEP

98304:nrHkwN+MdA5wqSnW188MMhJMjarJaon7JPzf+JiUCS3swhzqgez7DovaDJ1n6hBR:n7V1vqB6ylnlPzf+JiJCsmFMvln6hqgX

Score

7^/10

upx

Loads dropped DLL 1 IoCs

pid	Process
3056	TZEternal.exe

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/files/0x0006000000016d21-21.dat	upx
behavioral1/memory/3056-23-0x000007FEF5C20000-0x000007FEF620A000-memory.dmp	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2368 wrote to memory of 3056	2368	TZEternal.exe	30
PID 2368 wrote to memory of 3056	2368	TZEternal.exe	30
PID 2368 wrote to memory of 3056	2368	TZEternal.exe	30

C:\Users\Admin\AppData\Local\Temp\TZEternal.exe
"C:\Users\Admin\AppData\Local\Temp\TZEternal.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2368
- C:\Users\Admin\AppData\Local\Temp\TZEternal.exe
  "C:\Users\Admin\AppData\Local\Temp\TZEternal.exe"
  2⤵
  - Loads dropped DLL
  PID:3056

C:\Users\Admin\AppData\Local\Temp\_MEI23682\python311.dll

Filesize
1.6MB

MD5
1e76961ca11f929e4213fca8272d0194

SHA1
e52763b7ba970c3b14554065f8c2404112f53596

SHA256
8a0c27f9e5b2efd54e41d7e7067d7cb1c6d23bae5229f6d750f89568566227b0

SHA512
ec6ed913e0142a98cd7f6adced5671334ec6545e583284ae10627162b199e55867d7cf28efeaadce9862c978b01c234a850288e529d2d3e2ac7dbbb99c6cde9b

Download Submit
memory/3056-23-0x000007FEF5C20000-0x000007FEF620A000-memory.dmp

Filesize
5.9MB

Download