78f4cb6ed265c721890f28d96e33ce8b2defae0d8c71eaafbbc75199ca270d23

Analysis

max time kernel
33s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 09:13

Target

file.exe
Size

1.2MB
MD5

64245815b907d80151c520a10f3e83b0
SHA1

978170de87dfd5135cf0b3da9fb7900453caf1ec
SHA256

78f4cb6ed265c721890f28d96e33ce8b2defae0d8c71eaafbbc75199ca270d23
SHA512

280812154ff14668d152552aff58b6c631a7e2c4bcb98b86eea48179957da1b7901d0d32cfcc59ff7d3da65736a95fa32103b292b0da5dcfe0efea619914ec78
SSDEEP

24576:DjryZExuywyuvh9AVtjmSNXPIq7k2dzeFuUFOqdD3Gv:DjryZExF/qSN/Iq4eeFXFtD2v

Score

1^/10

Suspicious behavior: EnumeratesProcesses 5 IoCs

Processes:

file.exe

pid process

1664 file.exe
1664 file.exe
1664 file.exe
1664 file.exe
1664 file.exe

C:\Users\Admin\AppData\Local\Temp\file.exe
"C:\Users\Admin\AppData\Local\Temp\file.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1664

memory/1664-54-0x00000000022E0000-0x00000000028A8000-memory.dmp

Filesize
5.8MB

Download
memory/1664-55-0x0000000000590000-0x00000000006B1000-memory.dmp

Filesize
1.1MB

Download
memory/1664-56-0x0000000075FB1000-0x0000000075FB3000-memory.dmp

Filesize
8KB

Download
memory/1664-57-0x00000000022E0000-0x00000000028A8000-memory.dmp

Filesize
5.8MB

Download
memory/1664-58-0x000000000D380000-0x000000000D690000-memory.dmp

Filesize
3.1MB

Download
memory/1664-59-0x0000000000590000-0x00000000006B1000-memory.dmp

Filesize
1.1MB

Download
memory/1664-60-0x000000000D380000-0x000000000D690000-memory.dmp

Filesize
3.1MB

Download
memory/1664-61-0x0000000000590000-0x00000000006B1000-memory.dmp

Filesize
1.1MB

Download