2cece40eb92029ec8222ddbedc4a3541056cbe3f49ddbe9d0d99942b76b4a0ad

Analysis

max time kernel
122s
max time network
134s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
13-01-2024 22:18

Target

daemon/raven-cli.exe
Size

2.9MB
MD5

29313f4b7bb2c035019e6c657a55ef37
SHA1

9bf315c16cbbc972334d44b632ee28882de24698
SHA256

91769fd34a43055915a30b861f80d957df5f4dc5fb1ff7dcc291f5eaa2f16250
SHA512

c19d9e5555722aba7d50d5f1c91c95b2528ad70d7a01919233c9304079968de3a534d652cc6fb969b5fc162f6897e7ce9dba0ef08b38c411165525bee560a69e
SSDEEP

49152:sXdlcjszChwItOkj7Ciw7g0U80rTGsDrd3Hkds7UA7gUiBUZjI5a7+fEk0zo:QvbWwp5etrd3HkaVsAB

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2272	raven-cli.exe

C:\Users\Admin\AppData\Local\Temp\daemon\raven-cli.exe
"C:\Users\Admin\AppData\Local\Temp\daemon\raven-cli.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2272

memory/2272-0-0x0000000000400000-0x00000000006FD000-memory.dmp

Filesize
3.0MB

Download