21a96672cf57dad7a58060690e2b969e14fabab0b4d734278d9cc45bab93827d

Analysis

max time kernel
142s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 20:48

Target

3c44c2929172157ed306834f1f4b2c86.exe
Size

226KB
MD5

3c44c2929172157ed306834f1f4b2c86
SHA1

1a1a3c810db8a10aebaa363f477f3aa7b4159bc0
SHA256

21a96672cf57dad7a58060690e2b969e14fabab0b4d734278d9cc45bab93827d
SHA512

6260475dc781e89ade3739e602201670fd8c206e2b387c3668c700f3f42433eaf66bbc73c830f917e331123419aa47f75e04f5a21794337d26a766cbd871a578
SSDEEP

6144:b7zY/ERIwrbdFomt1sLGn/HDeh6Qp3g2Hl:bfYskY1iU/ih6QpQ2Hl

Score

4^/10

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\PocketSheets.job	3c44c2929172157ed306834f1f4b2c86.exe

C:\Users\Admin\AppData\Local\Temp\3c44c2929172157ed306834f1f4b2c86.exe
"C:\Users\Admin\AppData\Local\Temp\3c44c2929172157ed306834f1f4b2c86.exe"
1⤵
- Drops file in Windows directory
PID:4484

memory/4484-0-0x0000000000160000-0x0000000000161000-memory.dmp

Filesize
4KB

Download
memory/4484-1-0x0000000000180000-0x0000000000181000-memory.dmp

Filesize
4KB

Download
memory/4484-3-0x00000000001A0000-0x00000000001A1000-memory.dmp

Filesize
4KB

Download
memory/4484-2-0x0000000000170000-0x0000000000171000-memory.dmp

Filesize
4KB

Download
memory/4484-4-0x00000000001B0000-0x00000000001B1000-memory.dmp

Filesize
4KB

Download
memory/4484-5-0x00000000001C0000-0x00000000001E0000-memory.dmp

Filesize
128KB

Download
memory/4484-6-0x0000000000AA0000-0x0000000000ACF000-memory.dmp

Filesize
188KB

Download
memory/4484-10-0x00000000001C0000-0x00000000001E0000-memory.dmp

Filesize
128KB

Download
memory/4484-18-0x00000000001C0000-0x00000000001E0000-memory.dmp

Filesize
128KB

Download