b4a9fc978b8257aa655a92d9c01794023ff4be707be7118c4fa1a47284ccf898

Analysis

max time kernel
123s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
21-08-2023 04:32

Target

b4a9fc978b8257aa655a92d9c01794023ff4be707be7118c4fa1a47284ccf898.exe
Size

440KB
MD5

0cf52de6781b31b4cfc249b051e1c3ad
SHA1

80e91a9030c5fdde8caa6ba08ab686a660989cbd
SHA256

b4a9fc978b8257aa655a92d9c01794023ff4be707be7118c4fa1a47284ccf898
SHA512

d359a66bb80b4adc675bc5f0954ed561181267eb6a8358832cfd3c6f76158fd0af542af7fdd7697c798da5c780b33d752a08a100adb62236ba59283d5c748e08
SSDEEP

6144:4P+a1enaqhvVCtcGK1fURB+xOLXuocTgOz8ATnf/wSdX9QQ:4VQDCY1fURI6XuoEgOJf/wSdtQ

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2792	b4a9fc978b8257aa655a92d9c01794023ff4be707be7118c4fa1a47284ccf898.exe
2792	b4a9fc978b8257aa655a92d9c01794023ff4be707be7118c4fa1a47284ccf898.exe
2792	b4a9fc978b8257aa655a92d9c01794023ff4be707be7118c4fa1a47284ccf898.exe
2792	b4a9fc978b8257aa655a92d9c01794023ff4be707be7118c4fa1a47284ccf898.exe

C:\Users\Admin\AppData\Local\Temp\b4a9fc978b8257aa655a92d9c01794023ff4be707be7118c4fa1a47284ccf898.exe
"C:\Users\Admin\AppData\Local\Temp\b4a9fc978b8257aa655a92d9c01794023ff4be707be7118c4fa1a47284ccf898.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2792