4f97be86fd94c84a31cd8aa9bdb4310a6d251d0560e23eebb93d84596df72dfd

Analysis

max time kernel
140s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
20/04/2023, 10:16

Target
4f97be86fd94c84a31cd8aa9bdb4310a6d251d0560e23eebb93d84596df72dfd.exe
Size 181KB
Sample230420-massvabb6s
SHA256 4f97be86fd94c84a31cd8aa9bdb4310a6d251d0560e23eebb93d84596df72dfd
MD5 c516116fe61221dd8d318f1245803438
SHA1 2abc7b500dab24f627983868b38bcd4339ac5185
SHA512 c131fa4579bb21337233651e60bfeaffaf0c042529c2e2afda1d54639b128a3044dc2756f4d4744d51cf9903b03d9dcabf546db9bcbfa058ec626989a9268118
SSDEEP 3072:wBfukkpsKtV73CliVM5Zal1ZGjAmvsGk/XpwM0yjZzHPoz:3HTCkSZal1ZGhUGSZzHPoz
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3996	4f97be86fd94c84a31cd8aa9bdb4310a6d251d0560e23eebb93d84596df72dfd.exe
3996	4f97be86fd94c84a31cd8aa9bdb4310a6d251d0560e23eebb93d84596df72dfd.exe

C:\Users\Admin\AppData\Local\Temp\4f97be86fd94c84a31cd8aa9bdb4310a6d251d0560e23eebb93d84596df72dfd.exe
"C:\Users\Admin\AppData\Local\Temp\4f97be86fd94c84a31cd8aa9bdb4310a6d251d0560e23eebb93d84596df72dfd.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3996

memory/3996-133-0x0000000001040000-0x000000000138A000-memory.dmp

Download