08d04ae40642e0e82bb05e71df5ca2df95af9144392d4b59e9f88bfc86dd2a92

Analysis

max time kernel
43s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
06-01-2023 07:16

Target

file.exe
Size

2.2MB
MD5

2e03bba61c7afce2e5f70fda0fb997c0
SHA1

2e8d7835acd2eed0c9d9e77e7271469c3d95ce2c
SHA256

08d04ae40642e0e82bb05e71df5ca2df95af9144392d4b59e9f88bfc86dd2a92
SHA512

d8f9de32424432c55fe81b809c3558476d196fa2a8c649c2144daa82fdc4078c7aba925a061d87ee1368c0187b64f98841cc2d56daa0175d67faf3c033a553f0
SSDEEP

24576:bhZT4+g+xacuh9UHHxf+IgKuxjBSMQ0LGkjFH7lFmQ5pSaoV/6XpOo/P/UpKW1VB:bha30RPOSMQ0xx5rSaNP/w9/PXCE5X

Score

1^/10

Suspicious behavior: EnumeratesProcesses 5 IoCs

Processes:

file.exe

pid process

752 file.exe
752 file.exe
752 file.exe
752 file.exe
752 file.exe

C:\Users\Admin\AppData\Local\Temp\file.exe
"C:\Users\Admin\AppData\Local\Temp\file.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:752

memory/752-54-0x0000000075D01000-0x0000000075D03000-memory.dmp

Filesize
8KB

Download
memory/752-55-0x0000000002500000-0x00000000026CB000-memory.dmp

Filesize
1.8MB

Download
memory/752-56-0x000000000BCC0000-0x000000000BF98000-memory.dmp

Filesize
2.8MB

Download
memory/752-57-0x000000000BB10000-0x000000000BCD4000-memory.dmp

Filesize
1.8MB

Download
memory/752-58-0x0000000002500000-0x00000000026CB000-memory.dmp

Filesize
1.8MB

Download