Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
22-05-2024 22:18
General
-
Target
f156c5c109cdf1a8bc0a834e85c801fa923a86381cd26f280de99074a9748d46.exe
-
Size
2.2MB
-
MD5
c5141d5f7bff97d693b05d18f68c9c10
-
SHA1
982bed2ecd7e7ec5535a0da863672337592e78a9
-
SHA256
f156c5c109cdf1a8bc0a834e85c801fa923a86381cd26f280de99074a9748d46
-
SHA512
8e3d94e57207d0f15e15676cf89105c483adf70ed2b773b8d7ed2c9ab03ba1fd4a25dee005732de13d4abcd176c7c8a79f54852de245441a92b057fcdf758da5
-
SSDEEP
49152:WO/350OWK8J/yPtQX9RTYPO6mPq7NtcPGZhUMVLXJNB9:W20RKM/yPtQTYPO6Yq7Nt
Score
6/10
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious behavior: EnumeratesProcesses 16 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f156c5c109cdf1a8bc0a834e85c801fa923a86381cd26f280de99074a9748d46.exe"C:\Users\Admin\AppData\Local\Temp\f156c5c109cdf1a8bc0a834e85c801fa923a86381cd26f280de99074a9748d46.exe"1⤵
- Suspicious behavior: EnumeratesProcesses