8e7fd9e5a2399ec0d2e69e5e22a688e0f85f132c7be74b2cac68cebd49e90097

Analysis

max time kernel
148s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
08-01-2024 22:28

Target

4c9d89c256c9bfe649939c9f46f0bfec.exe
Size

293KB
MD5

4c9d89c256c9bfe649939c9f46f0bfec
SHA1

99cabd61e8b51c139ee961497ae24dbc7c1db0ef
SHA256

8e7fd9e5a2399ec0d2e69e5e22a688e0f85f132c7be74b2cac68cebd49e90097
SHA512

ffbe604c987424325841b23fb9e8771be6a3669c47c4b2a188e7f3623c34dcd44769b032acca3977e1e9c955c5541130b026f8fe223c29a48279e53e2691804a
SSDEEP

6144:WRjDh4C6OTDf3YoTxnkm4cqKr3+2qCfTXkxq9d1E6dqi4py5:WzDxTD3Y4yCjEy1

Score

4^/10

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Debug\WIA\wiatrace.log	4c9d89c256c9bfe649939c9f46f0bfec.exe

C:\Users\Admin\AppData\Local\Temp\4c9d89c256c9bfe649939c9f46f0bfec.exe
"C:\Users\Admin\AppData\Local\Temp\4c9d89c256c9bfe649939c9f46f0bfec.exe"
1⤵
- Drops file in Windows directory
PID:3520

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:2892