ff3949d2a8e0d6b08d2b8b643cdfc6a26f44352da217b4a537e9c16d96ed7198

Analysis

max time kernel
85s
max time network
121s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
06/03/2023, 08:31

Target
ff3949d2a8e0d6b08d2b8b643cdfc6a26f44352da217b4a537e9c16d96ed7198.exe
Size 172KB
Sample230306-kep7eaag3s
SHA256 ff3949d2a8e0d6b08d2b8b643cdfc6a26f44352da217b4a537e9c16d96ed7198
MD5 77b3ea27e7398e776a511b8fc5b1f2ed
SHA1 0917e1b5e74d35576978a667712849906e342743
SHA512 5f148e8bba2fc5b9de01388cb11c5fac9c8331a6b351cdc792b4075e90d22cd4237de50511d623a44af7adc35f216106347082eb165ef001d8b7ab99ad7d7671
SSDEEP 3072:VLifM4usJiw5elZRXWaJdn1HQwqmfQpqvq/WYyIgKQ8Tnl:VguQ5kRXd1wwJopqvZg9L
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1092	ff3949d2a8e0d6b08d2b8b643cdfc6a26f44352da217b4a537e9c16d96ed7198.exe
1092	ff3949d2a8e0d6b08d2b8b643cdfc6a26f44352da217b4a537e9c16d96ed7198.exe

C:\Users\Admin\AppData\Local\Temp\ff3949d2a8e0d6b08d2b8b643cdfc6a26f44352da217b4a537e9c16d96ed7198.exe
"C:\Users\Admin\AppData\Local\Temp\ff3949d2a8e0d6b08d2b8b643cdfc6a26f44352da217b4a537e9c16d96ed7198.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1092

memory/1092-133-0x0000000000C60000-0x0000000000FAA000-memory.dmp

Download