6d63d986a7efd607178b18468fa29699b6f22a8cb14d1f7b674c28bd94630cf8

Analysis

max time kernel
142s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231023-en
resource tags

arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
submitted
21-11-2023 07:08

Target

6d63d986a7efd607178b18468fa29699b6f22a8cb14d1f7b674c28bd94630cf8.exe
Size

1.2MB
MD5

d9c2f8752b35370852409c6b4996577e
SHA1

f97d7c55dc575c0e91c0467c80d4f48ce692250a
SHA256

6d63d986a7efd607178b18468fa29699b6f22a8cb14d1f7b674c28bd94630cf8
SHA512

2ba9b93270c8d47f59fd28cd881051ed560015cf4c1b0a545d62cd4b9ad3b6ffde5af4ce8d5433fa44d06e82510bd3d2a0ab2b8c6727dce27dfc540480e4bf35
SSDEEP

24576:PuhLJU9UnjrSO+NerWQwyx2TcfmH0Kg5QMIA97pO4CFsFJfJGuJ:PKnjrja6/wOdmxiO5Fi1JvJ

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3352	6d63d986a7efd607178b18468fa29699b6f22a8cb14d1f7b674c28bd94630cf8.exe
3352	6d63d986a7efd607178b18468fa29699b6f22a8cb14d1f7b674c28bd94630cf8.exe

C:\Users\Admin\AppData\Local\Temp\6d63d986a7efd607178b18468fa29699b6f22a8cb14d1f7b674c28bd94630cf8.exe
"C:\Users\Admin\AppData\Local\Temp\6d63d986a7efd607178b18468fa29699b6f22a8cb14d1f7b674c28bd94630cf8.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3352