2693f70bd7a4e791c18ed4ac22938de13e607a3eea342a7f894505c30f568034

Analysis

max time kernel
112s
max time network
132s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03/10/2022, 03:20

Target

f9a652ea2618ebbcce30a360dc041c60.exe
Size

5.1MB
MD5

f9a652ea2618ebbcce30a360dc041c60
SHA1

c4065e097bfbf443d9c073def9b74ed44645ed9a
SHA256

81c455f0f8bc8b842ee2a7b6dd2ba7bc144ebf9bd6b10e98b47b957e0ccce3f8
SHA512

3404a57c125fe3fd9fb55e57e117fd72bdd086cc73e9f1a42c8564d60b9597278a45a7cf17ea4d831f5fc5e43e1a40002ffe60da4abba712cb189d3ef78316ed
SSDEEP

49152:9y1krUAm3j7LWUIsnnnrb/TRvO90d7HjmAFd4A64nsfJF3eaZiphKTQCCpRt4gUn:2l3DfnCgnKTg9Qlug3/kCs

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4836	f9a652ea2618ebbcce30a360dc041c60.exe
4836	f9a652ea2618ebbcce30a360dc041c60.exe

C:\Users\Admin\AppData\Local\Temp\f9a652ea2618ebbcce30a360dc041c60.exe
"C:\Users\Admin\AppData\Local\Temp\f9a652ea2618ebbcce30a360dc041c60.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4836