8c5606a7010f8a4d5701c1b99fd91af0d1b59bf9bbedb345ba09b449a70fc29f

Analysis

max time kernel
91s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23/01/2023, 15:39

Target
decode_138335e60957a76d8318ae543e141ee956bd1d04166e60d1e54db1fb4af0ba4f.exe
Size 185KB
Sample230123-s3mp7adh98
SHA256 8c5606a7010f8a4d5701c1b99fd91af0d1b59bf9bbedb345ba09b449a70fc29f
MD5 b9733f37cece130cdf3480b30bd7e60b
SHA1 313880e20c871ac56e3adaefe35732546ebaba58
SHA512 d04616b23d9a983770cbddc130b53790827a23a62b5f8f3982169f1160adde53771cd37698df47eefb83801a9e219f948af4f9c56e9a7286ae1488294e07c32a
SSDEEP 3072:JqdYEHxkjxBqq3AfhTutpLKHL2yTMyAoXH1guZTtUxiXXTgafH:ItsAZQpLKHL2+MnoXOuZTtUIXTh
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4884	decode_138335e60957a76d8318ae543e141ee956bd1d04166e60d1e54db1fb4af0ba4f.exe
4884	decode_138335e60957a76d8318ae543e141ee956bd1d04166e60d1e54db1fb4af0ba4f.exe

C:\Users\Admin\AppData\Local\Temp\decode_138335e60957a76d8318ae543e141ee956bd1d04166e60d1e54db1fb4af0ba4f.exe
"C:\Users\Admin\AppData\Local\Temp\decode_138335e60957a76d8318ae543e141ee956bd1d04166e60d1e54db1fb4af0ba4f.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4884

memory/4884-132-0x0000000001340000-0x000000000168A000-memory.dmp

Download