d0f12689eacf1ad6c798d62635bf7f18a855264a42e072ca9a2cb6a742a39dba

Analysis

max time kernel
103s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
27-03-2023 05:31

Target

d0f12689eacf1ad6c798d62635bf7f18a855264a42e072ca9a2cb6a742a39dba.exe
Size

181KB
MD5

55928e32379750d6a8de4a645b9c5599
SHA1

74585436b947aa304b26fa718a6e82ce0ee1d438
SHA256

d0f12689eacf1ad6c798d62635bf7f18a855264a42e072ca9a2cb6a742a39dba
SHA512

636045d50d01b88b12ddda006ac7af712601aadc0ed18d4189633c59ec9b63a51e9dcaf98ca7ab258f9c65af29911cf9013b6dfc1d4eb050a15269340336aea1
SSDEEP

3072:IbX4kQvFJdO43t/c5scFV6hP/zSJRKUweMoeks3jG1ZlRRR:PU2tk5B6hP/MK9e3eHzG1Z

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

d0f12689eacf1ad6c798d62635bf7f18a855264a42e072ca9a2cb6a742a39dba.exe

pid	process
4032	d0f12689eacf1ad6c798d62635bf7f18a855264a42e072ca9a2cb6a742a39dba.exe
4032	d0f12689eacf1ad6c798d62635bf7f18a855264a42e072ca9a2cb6a742a39dba.exe

C:\Users\Admin\AppData\Local\Temp\d0f12689eacf1ad6c798d62635bf7f18a855264a42e072ca9a2cb6a742a39dba.exe
"C:\Users\Admin\AppData\Local\Temp\d0f12689eacf1ad6c798d62635bf7f18a855264a42e072ca9a2cb6a742a39dba.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4032

memory/4032-133-0x0000000001390000-0x00000000016DA000-memory.dmp

Filesize
3.3MB

Download