System Process[.]dll[.]exe

General

Target
System Process.dll.exe
Size 377KB
Sample261023-eey7eshv6s
SHA256 0db860c62ce8c95ae3018ef4ded4711bc212d9bd54d4da1063da18790dbecac8
MD5 6e97bcda2e93e0f85a482d57f222d8bc
SHA1 7e499b9235862991e46d51db2ca960bb72cd0ad1
SHA512 d8995119b7a027a5e29643a1ad2d9f222f31e446edb9da23dc7f86d528ec657e6cd18eb691af49f69717a78c597a10f01d66ca80b6f3c6dad4064f73d9014c8f
SSDEEP 6144:NURsmaLBNliOaFsPQsxPjt/N0mm1SqqLK4qcBcpxndjO0Ezn0x7U:wsmaL3cLsPQsHN07SZ/qmGEz0x7U
TLSH
T1DF8401236A4C85E1DA17393984F7CB461260BCFD46868D6E32ED3F1873B6B0E442F566
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
System Process.dll.exe

File Explorer

System Process.dll.exe

.exe 377KB

System Process.dll.exe

SHA256 0db860c62ce8c95ae3018ef4ded4711bc212d9bd54d4da1063da18790dbecac8
MD5 6e97bcda2e93e0f85a482d57f222d8bc
SHA1 7e499b9235862991e46d51db2ca960bb72cd0ad1
SHA512 d8995119b7a027a5e29643a1ad2d9f222f31e446edb9da23dc7f86d528ec657e6cd18eb691af49f69717a78c597a10f01d66ca80b6f3c6dad4064f73d9014c8f
SSDEEP 6144:NURsmaLBNliOaFsPQsxPjt/N0mm1SqqLK4qcBcpxndjO0Ezn0x7U:wsmaL3cLsPQsHN07SZ/qmGEz0x7U
TLSH
T1DF8401236A4C85E1DA17393984F7CB461260BCFD46868D6E32ED3F1873B6B0E442F566
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Administrator\Pictures\noobsaibot\Loader\obj\Release\net8.0-windows\win-x64\System Process.pdb

Sharing

General

Malware Config

Signatures

File Explorer

System Process.dll.exe

generic