8f8ef3b449352f7379dfa85ec4cb2eb00e4901db3ecc2f68cc81be62f359f898

Analysis

max time kernel
92s
max time network
106s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
24-11-2022 22:19

Target

8f8ef3b449352f7379dfa85ec4cb2eb00e4901db3ecc2f68cc81be62f359f898.exe
Size

203KB
MD5

c644cf7a01d379255db64b79f5f431d5
SHA1

788d4e0891d73b7498f0e2f9bbd132ce6b7935f1
SHA256

8f8ef3b449352f7379dfa85ec4cb2eb00e4901db3ecc2f68cc81be62f359f898
SHA512

c6794424f482aac8e4e99022ef7873185746700a6c3c1b6a8533bcc67156aadf830ddc6e29b7380efe68afade35571ee19996790403213ffefe6933ac506f071
SSDEEP

3072:6zfREw4n3yy83FopwjAmuUxyUJgTO2i5d17b8ThED3cCzfDYGiV4jZqMNRsEf:qRPv8wjA+xyUUi5dhb8ThkMCjdWYvj

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes:

8f8ef3b449352f7379dfa85ec4cb2eb00e4901db3ecc2f68cc81be62f359f898.exe

pid	process
3592	8f8ef3b449352f7379dfa85ec4cb2eb00e4901db3ecc2f68cc81be62f359f898.exe
3592	8f8ef3b449352f7379dfa85ec4cb2eb00e4901db3ecc2f68cc81be62f359f898.exe
3592	8f8ef3b449352f7379dfa85ec4cb2eb00e4901db3ecc2f68cc81be62f359f898.exe
3592	8f8ef3b449352f7379dfa85ec4cb2eb00e4901db3ecc2f68cc81be62f359f898.exe

C:\Users\Admin\AppData\Local\Temp\8f8ef3b449352f7379dfa85ec4cb2eb00e4901db3ecc2f68cc81be62f359f898.exe
"C:\Users\Admin\AppData\Local\Temp\8f8ef3b449352f7379dfa85ec4cb2eb00e4901db3ecc2f68cc81be62f359f898.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3592