420f9f9e478e8c5472f2c776c5de474b4fb4b5661c4af55ec4996e8965ca9c05

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10-06-2024 22:23

Target

2024-06-10_eb8cc43f223b1f6e59aa9eebd7e3b5ca_snatch.exe
Size

25.6MB
MD5

eb8cc43f223b1f6e59aa9eebd7e3b5ca
SHA1

7ce01d236fd2e198e32a6f6d510b0e722074ca73
SHA256

420f9f9e478e8c5472f2c776c5de474b4fb4b5661c4af55ec4996e8965ca9c05
SHA512

cd3d1a8a75fcad0437296f20e03a9ec5f4bb9ff936e7e0bec1acdd50065a2d99c64d5d35c2689f73caa9b8c9f9bc61adc0a5744ddaf5c0494469146739c4755b
SSDEEP

98304:GZhUqR3reHh9k7dT47LpuBzx0MCRxWcD2470aUQ80EZn912zmOVYuQW45AOWQg5i:GREHTk7d4pJ3cZVJ5q

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
808	2024-06-10_eb8cc43f223b1f6e59aa9eebd7e3b5ca_snatch.exe
808	2024-06-10_eb8cc43f223b1f6e59aa9eebd7e3b5ca_snatch.exe

C:\Users\Admin\AppData\Local\Temp\2024-06-10_eb8cc43f223b1f6e59aa9eebd7e3b5ca_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2024-06-10_eb8cc43f223b1f6e59aa9eebd7e3b5ca_snatch.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:808