53bf262830fa7e39f79ff27aa43d0cf63c76a2d481f706da03629ddae7775494

Analysis

max time kernel
2s
max time network
15s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
24/12/2023, 17:03

Reason

Machine shutdown

Target

0738ab32f9426392d284183361e0d8b0.exe
Size

24KB
MD5

0738ab32f9426392d284183361e0d8b0
SHA1

af43b3eeff5ee03d00499016c5d94c17ff294fd9
SHA256

53bf262830fa7e39f79ff27aa43d0cf63c76a2d481f706da03629ddae7775494
SHA512

c1e32fbdc1f99d054c809336779ec9e12a6766d19de9a825755ecf73808d8a2440970c134ec4deadaf2814641699227e2d93c00eb2bcc909d86c0a40fda6350c
SSDEEP

192:KCFEIW9H9i9s9G9h9aOUUMGDryPOKVY68KUBxZY1VBta1lyhCgErZsivIw5RoT/v:KI5mGMMtKVbnSrNvIw5RoTv

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
976	0738ab32f9426392d284183361e0d8b0.exe
976	0738ab32f9426392d284183361e0d8b0.exe

C:\Users\Admin\AppData\Local\Temp\0738ab32f9426392d284183361e0d8b0.exe
"C:\Users\Admin\AppData\Local\Temp\0738ab32f9426392d284183361e0d8b0.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:976

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x4 /state0:0xa395f855 /state1:0x41c64e6d
1⤵
PID:5004