b0d132895db3e1cfbc349e6a65987879a95bafc1e6c24fd68d5b9a1373b0ca6c

Analysis

max time kernel
104s
max time network
98s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 13:21

Target

b0d132895db3e1cfbc349e6a65987879a95bafc1e6c24fd68d5b9a1373b0ca6c.exe
Size

1.6MB
MD5

64c2d792157530359c446c926dfcde70
SHA1

09b34cbfce3cb7671c18ca1db7a9b68ea6895233
SHA256

b0d132895db3e1cfbc349e6a65987879a95bafc1e6c24fd68d5b9a1373b0ca6c
SHA512

64a057bd3a40689a486577e24c6dd4bc677381133427a2e1138f84e759b77a58a93136598bf0c685675fa68ea796ac088865170380df3d0880a3be23de282af9
SSDEEP

49152:fcj4YRJts/bhIAMsY4YoIv+IArxzsKUuxUNYd6jco4XdJNKppUsg/192dogtIKts:fcc0s1rC4YtHdogtdz2w29

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes:

b0d132895db3e1cfbc349e6a65987879a95bafc1e6c24fd68d5b9a1373b0ca6c.exe

pid process

736 b0d132895db3e1cfbc349e6a65987879a95bafc1e6c24fd68d5b9a1373b0ca6c.exe

pid	process
736	b0d132895db3e1cfbc349e6a65987879a95bafc1e6c24fd68d5b9a1373b0ca6c.exe

C:\Users\Admin\AppData\Local\Temp\b0d132895db3e1cfbc349e6a65987879a95bafc1e6c24fd68d5b9a1373b0ca6c.exe
"C:\Users\Admin\AppData\Local\Temp\b0d132895db3e1cfbc349e6a65987879a95bafc1e6c24fd68d5b9a1373b0ca6c.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:736