75fcb5d94124e7f3d099d6ac35a1af401bd52d68d6480a231171ae3b4833688a

Analysis

max time kernel
43s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
08-01-2023 20:20

Target

file.exe
Size

2.1MB
MD5

e52f5370a68e1ee7b5f24b708924025b
SHA1

bf920f1fe420f1c8dc8dba7112f1b57bf0d6dfb7
SHA256

75fcb5d94124e7f3d099d6ac35a1af401bd52d68d6480a231171ae3b4833688a
SHA512

7a2245652656888ec46a4a081aaa52ca86723b6d251059882b756fd0b7c8b0a576ad29c0b46fe3706a40d680c3940f3cadbd3716de98066b64b0b904fb624286
SSDEEP

49152:B61lu6RZizQwhPuMaWFVCInTda0xW7hl8A:gG6KQwh2Mao9w+W7DZ

Score

1^/10

Suspicious behavior: EnumeratesProcesses 5 IoCs

Processes:

file.exe

pid process

1940 file.exe
1940 file.exe
1940 file.exe
1940 file.exe
1940 file.exe

C:\Users\Admin\AppData\Local\Temp\file.exe
"C:\Users\Admin\AppData\Local\Temp\file.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1940

memory/1940-54-0x0000000075DF1000-0x0000000075DF3000-memory.dmp

Filesize
8KB

Download
memory/1940-55-0x000000000F0B0000-0x000000000F3B5000-memory.dmp

Filesize
3.0MB

Download
memory/1940-56-0x00000000025B0000-0x0000000002782000-memory.dmp

Filesize
1.8MB

Download
memory/1940-57-0x000000000F0B0000-0x000000000F274000-memory.dmp

Filesize
1.8MB

Download
memory/1940-58-0x00000000025B0000-0x0000000002782000-memory.dmp

Filesize
1.8MB

Download