b6790e0cfadf648a5f144f50793a63202e5acb259410bf4275a940fd3873a140

Analysis

max time kernel
170s
max time network
174s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 10:03

Target

b6790e0cfadf648a5f144f50793a63202e5acb259410bf4275a940fd3873a140.exe
Size

227KB
MD5

66b368da1da65c09ac1275966c200509
SHA1

9d9650694b25fcf750168a591abda7d56c12480a
SHA256

b6790e0cfadf648a5f144f50793a63202e5acb259410bf4275a940fd3873a140
SHA512

41c9297914fc5d96364a8f9fd934332cf81ff4d1b3483c5a4cb39356dda4b776cf39b55853d336567784048756644d51a54c4d1d7010cf7d657a0054bd3cd5f5
SSDEEP

3072:2RG5OfNdFWDxdPcH0fpHTANy3Hry+uX28PpWE+Fj2a119B6RRRRRRRRRRRRRRRR4:2M68Fdm0fpHTANXFpj8X11vW3oAo

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes:

b6790e0cfadf648a5f144f50793a63202e5acb259410bf4275a940fd3873a140.exe

pid process

1980 b6790e0cfadf648a5f144f50793a63202e5acb259410bf4275a940fd3873a140.exe

pid	process
1980	b6790e0cfadf648a5f144f50793a63202e5acb259410bf4275a940fd3873a140.exe

C:\Users\Admin\AppData\Local\Temp\b6790e0cfadf648a5f144f50793a63202e5acb259410bf4275a940fd3873a140.exe
"C:\Users\Admin\AppData\Local\Temp\b6790e0cfadf648a5f144f50793a63202e5acb259410bf4275a940fd3873a140.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1980