2f4f94bfed428eddafff6e978a8042cd7519e4708ef6a3aaa6eb4b7f79e3c453

Analysis

max time kernel
142s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
30/10/2023, 05:52

Target
4041c56677d1cb00888fd21ba80683f0.exe
Size 185KB
Sample231030-gkrewabc5v
SHA256 2f4f94bfed428eddafff6e978a8042cd7519e4708ef6a3aaa6eb4b7f79e3c453
MD5 4041c56677d1cb00888fd21ba80683f0
SHA1 2527c1e306c2d0338580e709304180c69d7a4040
SHA512 dde29ede15c58a3c003e211e5ed4e5d1e54e77bf0fc14c3507e31b13644d907736806816876ee2aacb284c0f727f676e2a4a2afdfb0e81f616b91b09c4116d4d
SSDEEP 3072:MhiQaFrSCnW6KU7FQI01V+73eb1cfKTuOLmIWp/aIw2tcXb1o2mfWY:mVCn3BA1VU3e4KTuOLmMW4i2mf/
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
712	4041c56677d1cb00888fd21ba80683f0.exe
712	4041c56677d1cb00888fd21ba80683f0.exe

C:\Users\Admin\AppData\Local\Temp\4041c56677d1cb00888fd21ba80683f0.exe
"C:\Users\Admin\AppData\Local\Temp\4041c56677d1cb00888fd21ba80683f0.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:712

memory/712-0-0x0000000000D80000-0x00000000010CA000-memory.dmp

Download