28bf6b7bf648f9bdf56a3440dbdd3dc6d785faf9fbbebdb7ef4067740f871eed

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
03-07-2024 02:22

Target

28bf6b7bf648f9bdf56a3440dbdd3dc6d785faf9fbbebdb7ef4067740f871eed.exe
Size

9.2MB
MD5

f9a7e89f602d8eafeeace880ed749e1b
SHA1

550f23c49e7993d4de8d65e9f8c5b18465dc8209
SHA256

28bf6b7bf648f9bdf56a3440dbdd3dc6d785faf9fbbebdb7ef4067740f871eed
SHA512

da533af4e1071464a0b73279fb0a7762f21fef40f64b0a1dd28f1ae9b885cca7c90bfa8d4b620584208e492fc74e5b8ee988e0a1acf892dac524e82dbd9322e8
SSDEEP

196608:7EpPqitlegevcAbzxWUky4J4EeRDc6aKiL6oBJsZZF6lPE5UQ:YciCguXkn4EeRHZiLPSFqlQ

Score

1^/10

Suspicious behavior: EnumeratesProcesses 3 IoCs

pid	Process
2956	28bf6b7bf648f9bdf56a3440dbdd3dc6d785faf9fbbebdb7ef4067740f871eed.exe
2956	28bf6b7bf648f9bdf56a3440dbdd3dc6d785faf9fbbebdb7ef4067740f871eed.exe
2956	28bf6b7bf648f9bdf56a3440dbdd3dc6d785faf9fbbebdb7ef4067740f871eed.exe

C:\Users\Admin\AppData\Local\Temp\28bf6b7bf648f9bdf56a3440dbdd3dc6d785faf9fbbebdb7ef4067740f871eed.exe
"C:\Users\Admin\AppData\Local\Temp\28bf6b7bf648f9bdf56a3440dbdd3dc6d785faf9fbbebdb7ef4067740f871eed.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2956