fee1d36af03a162f70a627c7cd3efa55b0557530d7eefbe8c72026f48b904595

Analysis

max time kernel
42s
max time network
44s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
12-01-2023 07:20

Target

file.exe
Size

2.0MB
MD5

1184c28ad980d08f820085fa46018b9f
SHA1

4cfd74333320f9aa38d5a77eb16ce3da10729c9a
SHA256

fee1d36af03a162f70a627c7cd3efa55b0557530d7eefbe8c72026f48b904595
SHA512

8ebe95c7d32ceb7986617d4a069cc73540fd32049cd3c10cd9c1aac5a1993814ec43eece61195d7de1e4a2aad35cfab5959e75ad8551de22ad904eed3811e1b9
SSDEEP

49152:0KlYcfLLLIWpjLHUmACAkczzqcBrywk0dTTBj:0KWcfrXxH1AVDBmwfdT9

Score

1^/10

Suspicious behavior: EnumeratesProcesses 5 IoCs

Processes:

file.exe

pid process

864 file.exe
864 file.exe
864 file.exe
864 file.exe
864 file.exe

C:\Users\Admin\AppData\Local\Temp\file.exe
"C:\Users\Admin\AppData\Local\Temp\file.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:864

memory/864-54-0x0000000076831000-0x0000000076833000-memory.dmp

Filesize
8KB

Download
memory/864-55-0x000000000AC90000-0x000000000AF6F000-memory.dmp

Filesize
2.9MB

Download
memory/864-56-0x0000000001FE0000-0x000000000217F000-memory.dmp

Filesize
1.6MB

Download
memory/864-57-0x000000000AB90000-0x000000000AD54000-memory.dmp

Filesize
1.8MB

Download
memory/864-58-0x0000000001FE0000-0x000000000217F000-memory.dmp

Filesize
1.6MB

Download