75c3393e6b6be630faa40221894491b06a54ec24e1d9ae9f13235ad835c4df67

Analysis

max time kernel
61s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
29-03-2023 10:31

Target

Zoom_cm_fo42anktZ9vvrZo4_medYjfIgThPiOIxacKGullNxrcZ+bcEQzUJp0@-DTVDph0y5vPBB0H_kb555b0ad0179d7b5_.exe
Size

134KB
MD5

98533b90fa7909adf78ac17f78147572
SHA1

75f0a91b72adb12f1ca65d3516489d71705e2435
SHA256

75c3393e6b6be630faa40221894491b06a54ec24e1d9ae9f13235ad835c4df67
SHA512

afb720431c912c943b4cd0289092b06b0dff453eba71dca28ea2fa8c8afd44519449abb300ee4397937b02c0917d785531753267bb6d2afff188f1534e57b02f
SSDEEP

1536:1IuW+VEZ7w+l3+9/X3aAayuUhME8vDucomgZdAI9NsWxPq9cd9NNKP/TbQMLn5z6:vRex3I/HLMxvDJ0dx9N4XQMTBWQ6WRY

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes:

Zoom_cm_fo42anktZ9vvrZo4_medYjfIgThPiOIxacKGullNxrcZ+bcEQzUJp0@-DTVDph0y5vPBB0H_kb555b0ad0179d7b5_.exe

pid	process
2592	Zoom_cm_fo42anktZ9vvrZo4_medYjfIgThPiOIxacKGullNxrcZ+bcEQzUJp0@-DTVDph0y5vPBB0H_kb555b0ad0179d7b5_.exe
2592	Zoom_cm_fo42anktZ9vvrZo4_medYjfIgThPiOIxacKGullNxrcZ+bcEQzUJp0@-DTVDph0y5vPBB0H_kb555b0ad0179d7b5_.exe
2592	Zoom_cm_fo42anktZ9vvrZo4_medYjfIgThPiOIxacKGullNxrcZ+bcEQzUJp0@-DTVDph0y5vPBB0H_kb555b0ad0179d7b5_.exe
2592	Zoom_cm_fo42anktZ9vvrZo4_medYjfIgThPiOIxacKGullNxrcZ+bcEQzUJp0@-DTVDph0y5vPBB0H_kb555b0ad0179d7b5_.exe

C:\Users\Admin\AppData\Local\Temp\Zoom_cm_fo42anktZ9vvrZo4_medYjfIgThPiOIxacKGullNxrcZ+bcEQzUJp0@-DTVDph0y5vPBB0H_kb555b0ad0179d7b5_.exe
"C:\Users\Admin\AppData\Local\Temp\Zoom_cm_fo42anktZ9vvrZo4_medYjfIgThPiOIxacKGullNxrcZ+bcEQzUJp0@-DTVDph0y5vPBB0H_kb555b0ad0179d7b5_.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2592
- C:\Users\Admin\AppData\Local\Temp\Zoom_cm_fo42anktZ9vvrZo4_medYjfIgThPiOIxacKGullNxrcZ+bcEQzUJp0@-DTVDph0y5vPBB0H_kb555b0ad0179d7b5_.exe
  "C:\Users\Admin\AppData\Local\Temp\Zoom_cm_fo42anktZ9vvrZo4_medYjfIgThPiOIxacKGullNxrcZ+bcEQzUJp0@-DTVDph0y5vPBB0H_kb555b0ad0179d7b5_.exe" /normal.priviledge
  2⤵
  PID:2156