b53dbe8bd2e7ca82eee8906d66ad23a55944f5e6beed5af1ec4848e34e007707

Analysis

max time kernel
119s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
09/01/2024, 12:40

Target

ztnp-agent-prestine-only-relay-trace.exe
Size

12.3MB
MD5

3e6dcdb2030e008aec801f426411e9cb
SHA1

06375fc99a422764e663abc7a87e1c92c8617d32
SHA256

b53dbe8bd2e7ca82eee8906d66ad23a55944f5e6beed5af1ec4848e34e007707
SHA512

711e818fcb267d384185714f760a744b9b2d837f4b6ae57b1375bd0342c85c7667a4e6152cede637be71141a573dbb5726cb645945fc579a876f57e4f14d8dc6
SSDEEP

98304:w+5ZqM7HWQGtPm4BHE2N5nJEixNGPsvyb8f7iY5CXE6VaaRQjZtkhpZjqmbSVI3B:wo2RJx1kGrzm

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2156	ztnp-agent-prestine-only-relay-trace.exe
2156	ztnp-agent-prestine-only-relay-trace.exe

C:\Users\Admin\AppData\Local\Temp\ztnp-agent-prestine-only-relay-trace.exe
"C:\Users\Admin\AppData\Local\Temp\ztnp-agent-prestine-only-relay-trace.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2156