b0c852bb64ab08b015ce82333aeb44a5f9a5828cb13c059e497adf99cc417e70

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
06-02-2025 22:19

Target

Infinity.exe
Size

8.8MB
MD5

84b29dc904c2e7f624e9401b66d78704
SHA1

d7e9c010f945905408e084394dc93c3620dc20a2
SHA256

b0c852bb64ab08b015ce82333aeb44a5f9a5828cb13c059e497adf99cc417e70
SHA512

dafc36900c77251a0db892c8646dc25fc08f187180116309b7c3421e33ea97e17d37e9ae35790f226c969adef4f6b1a778f68fafc6f811e4910dadc7f4ef3ae2
SSDEEP

196608:FTxU+kGrmvNm1E8giq1g9K5RHvUWvoPhxjno/w3iFCxHQbRpXLF8RRgmu:SGrm1m1NqV5RHdMxro/w3uCxHQb7FORi

Score

7^/10

upx

Loads dropped DLL 1 IoCs

pid	Process
2692	Infinity.exe

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2692-48-0x000007FEF53B0000-0x000007FEF5815000-memory.dmp	upx
behavioral1/files/0x000500000001a4ab-47.dat	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2244 wrote to memory of 2692	2244	Infinity.exe	30
PID 2244 wrote to memory of 2692	2244	Infinity.exe	30
PID 2244 wrote to memory of 2692	2244	Infinity.exe	30

C:\Users\Admin\AppData\Local\Temp\Infinity.exe
"C:\Users\Admin\AppData\Local\Temp\Infinity.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2244
- C:\Users\Admin\AppData\Local\Temp\Infinity.exe
  "C:\Users\Admin\AppData\Local\Temp\Infinity.exe"
  2⤵
  - Loads dropped DLL
  PID:2692

\Users\Admin\AppData\Local\Temp\_MEI22442\python310.dll

Filesize
1.4MB

MD5
90d5b8ba675bbb23f01048712813c746

SHA1
f2906160f9fc2fa719fea7d37e145156742ea8a7

SHA256
3a7d497d779ff13082835834a1512b0c11185dd499ab86be830858e7f8aaeb3e

SHA512
872c2bf56c3fe180d9b4fb835a92e1dc188822e9d9183aab34b305408bb82fba1ead04711e8ad2bef1534e86cd49f2445d728851206d7899c1a7a83e5a62058e

Download Submit
memory/2692-48-0x000007FEF53B0000-0x000007FEF5815000-memory.dmp

Filesize
4.4MB

Download
memory/2692-49-0x000007FEF53B0000-0x000007FEF5815000-memory.dmp

Filesize
4.4MB

Download