b858e444a569cbfc372da5c8c5d8f8747ef20a86d00d5f0e61edfc2a8ea0744c

Analysis

max time kernel
149s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
25/11/2022, 13:14

Target

b858e444a569cbfc372da5c8c5d8f8747ef20a86d00d5f0e61edfc2a8ea0744c.exe
Size

1.6MB
MD5

63db1d8326abbe3f30b3d8b664be6fb3
SHA1

baab21f931cc487787b6eab03c7ba8af6d86e5ab
SHA256

b858e444a569cbfc372da5c8c5d8f8747ef20a86d00d5f0e61edfc2a8ea0744c
SHA512

bbc2724b1cec1aef0d8e664dc9f281574b4c450cf0903f6068a96d7b72113118eecc85a4820544ff08ee9612440ab39b31bbad9efee65df20d4b094759785da9
SSDEEP

49152:fcj4YRJts/bhIAMsY4YoIv+IArxzsKUuxUNYd6jco4XdJNKppUsg/192dogtIKtL:fcc0s1rC4YtHdogtdz2w2+

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4592	b858e444a569cbfc372da5c8c5d8f8747ef20a86d00d5f0e61edfc2a8ea0744c.exe
4592	b858e444a569cbfc372da5c8c5d8f8747ef20a86d00d5f0e61edfc2a8ea0744c.exe

C:\Users\Admin\AppData\Local\Temp\b858e444a569cbfc372da5c8c5d8f8747ef20a86d00d5f0e61edfc2a8ea0744c.exe
"C:\Users\Admin\AppData\Local\Temp\b858e444a569cbfc372da5c8c5d8f8747ef20a86d00d5f0e61edfc2a8ea0744c.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4592