ca06a341ee78ff69cc717bd934c08e0bbe0e8aa77df16a4601db196f742abc54

Analysis

max time kernel
177s
max time network
234s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
28/11/2022, 01:56

Target

ca06a341ee78ff69cc717bd934c08e0bbe0e8aa77df16a4601db196f742abc54.exe
Size

21KB
MD5

6a7320906c335cfb1bab6665bde8fd92
SHA1

7c9f90e58bf491b10126850cf4548311dfc8a511
SHA256

ca06a341ee78ff69cc717bd934c08e0bbe0e8aa77df16a4601db196f742abc54
SHA512

076222ddca49a0e418985d1ec79f9cb3738ff7ca0ac990e0230bcb6fd717be1cee5491a2ea936948d9dcbe5e04ff0a026f2d81947edf0ed4ebedf4c91b4c3158
SSDEEP

384:bx02c+NiNMhaS9MySYitL93lppji83C8ARDr3QfTQkNEExIstAv3ATefCiigrcL6:62XiNCR9MLYWi8JsOOstAv3ATec460t9

Score

1^/10

Suspicious behavior: EnumeratesProcesses 18 IoCs

pid	Process
988	ca06a341ee78ff69cc717bd934c08e0bbe0e8aa77df16a4601db196f742abc54.exe
988	ca06a341ee78ff69cc717bd934c08e0bbe0e8aa77df16a4601db196f742abc54.exe
988	ca06a341ee78ff69cc717bd934c08e0bbe0e8aa77df16a4601db196f742abc54.exe
988	ca06a341ee78ff69cc717bd934c08e0bbe0e8aa77df16a4601db196f742abc54.exe
988	ca06a341ee78ff69cc717bd934c08e0bbe0e8aa77df16a4601db196f742abc54.exe
988	ca06a341ee78ff69cc717bd934c08e0bbe0e8aa77df16a4601db196f742abc54.exe
988	ca06a341ee78ff69cc717bd934c08e0bbe0e8aa77df16a4601db196f742abc54.exe
988	ca06a341ee78ff69cc717bd934c08e0bbe0e8aa77df16a4601db196f742abc54.exe
988	ca06a341ee78ff69cc717bd934c08e0bbe0e8aa77df16a4601db196f742abc54.exe
988	ca06a341ee78ff69cc717bd934c08e0bbe0e8aa77df16a4601db196f742abc54.exe
988	ca06a341ee78ff69cc717bd934c08e0bbe0e8aa77df16a4601db196f742abc54.exe
988	ca06a341ee78ff69cc717bd934c08e0bbe0e8aa77df16a4601db196f742abc54.exe
988	ca06a341ee78ff69cc717bd934c08e0bbe0e8aa77df16a4601db196f742abc54.exe
988	ca06a341ee78ff69cc717bd934c08e0bbe0e8aa77df16a4601db196f742abc54.exe
988	ca06a341ee78ff69cc717bd934c08e0bbe0e8aa77df16a4601db196f742abc54.exe
988	ca06a341ee78ff69cc717bd934c08e0bbe0e8aa77df16a4601db196f742abc54.exe
988	ca06a341ee78ff69cc717bd934c08e0bbe0e8aa77df16a4601db196f742abc54.exe
988	ca06a341ee78ff69cc717bd934c08e0bbe0e8aa77df16a4601db196f742abc54.exe

C:\Users\Admin\AppData\Local\Temp\ca06a341ee78ff69cc717bd934c08e0bbe0e8aa77df16a4601db196f742abc54.exe
"C:\Users\Admin\AppData\Local\Temp\ca06a341ee78ff69cc717bd934c08e0bbe0e8aa77df16a4601db196f742abc54.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:988