79fd5a7e4a09042cae5f0f54233085f35135051a5ba3845a4ffbf740e160205a

Analysis

max time kernel
134s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
05-08-2022 13:27

Target

111.exe
Size

4.9MB
MD5

f4baf22ddb455707b91fec0ee48257fc
SHA1

cd67e9d5e6d566e27af68592c85afad853e7ae97
SHA256

79fd5a7e4a09042cae5f0f54233085f35135051a5ba3845a4ffbf740e160205a
SHA512

d6dc37d9de540e2c2b7b7c97b5e7b9e9929703cfc47d64cdfcc2871d53bc0981b93a90eafb4e15caffe7886d89d797aba69bada36aefff1f827b964b63ad1b66

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

111.exe

pid process

2660 111.exe
2660 111.exe

pid	process
2660	111.exe
2660	111.exe

C:\Users\Admin\AppData\Local\Temp\111.exe
"C:\Users\Admin\AppData\Local\Temp\111.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2660

memory/2660-130-0x0000000000400000-0x0000000000C09000-memory.dmp

Filesize
8.0MB

Download
memory/2660-133-0x0000000000400000-0x0000000000C09000-memory.dmp

Filesize
8.0MB

Download
memory/2660-134-0x00000000054E0000-0x0000000005A84000-memory.dmp

Filesize
5.6MB

Download
memory/2660-135-0x0000000005A90000-0x00000000060A8000-memory.dmp

Filesize
6.1MB

Download
memory/2660-136-0x0000000005450000-0x0000000005462000-memory.dmp

Filesize
72KB

Download
memory/2660-137-0x00000000060B0000-0x00000000061BA000-memory.dmp

Filesize
1.0MB

Download
memory/2660-138-0x0000000005490000-0x00000000054CC000-memory.dmp

Filesize
240KB

Download
memory/2660-139-0x0000000000400000-0x0000000000C09000-memory.dmp

Filesize
8.0MB

Download