b21eb63020ecd3a62d5677afa91e39d6f1fd102f30c685432724c201bbe01dba

Analysis

max time kernel
146s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 19:02

Target

2_Via_Boleto_31102014.exe
Size

1.4MB
MD5

67dfe2316587fb8aa83891a32ac0581c
SHA1

83ad14f6881e2b0beeb94e6876b82ae89dec101b
SHA256

f4b133d0cc83e3ef83a8e2e82835474146c32aa0a963e44610b3c55280574e66
SHA512

f43b022852b9ca2118f3160f39d9590f0f1043864464307a2772096aec25372580b093fb926146fa9c7b271966b59808774ba523db0e6f10efaa640e8a4f8c7f
SSDEEP

24576:nNYNVL2Fv1WP6o+EeCdbBtStd6w9AT/sy7z/ijJD1pPFGXKDjzTw+R2hqA+tk2u:qwQ/SAsyX/ijJD1FFGXy/TTqx+tk2

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

2_Via_Boleto_31102014.exe

pid process

1200 2_Via_Boleto_31102014.exe
1200 2_Via_Boleto_31102014.exe

pid	process
1200	2_Via_Boleto_31102014.exe
1200	2_Via_Boleto_31102014.exe

C:\Users\Admin\AppData\Local\Temp\2_Via_Boleto_31102014.exe
"C:\Users\Admin\AppData\Local\Temp\2_Via_Boleto_31102014.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1200