6d1be858f14b22d9fc24f5f136ef3b3b938bc4f3db28c15cef747de0c4226be0

Analysis

max time kernel
100s
max time network
111s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
21-11-2024 11:54

Target

6d1be858f14b22d9fc24f5f136ef3b3b938bc4f3db28c15cef747de0c4226be0.exe
Size

2.0MB
MD5

16c5c1dc2627aefd03fee33ead7bb992
SHA1

2379194b7eb2f2a27de232a160616fb1e50a282a
SHA256

6d1be858f14b22d9fc24f5f136ef3b3b938bc4f3db28c15cef747de0c4226be0
SHA512

19cf2abad8ee947c975fc63a55d21dbd814a591f6f51111bd87a08645637024f67e219d39a8dc7c0f0216d8f9b68e79445221010ffd1c8dd65ceb1114910fc4b
SSDEEP

49152:YuTClvSI7ETmJRBBkBp3jgSIWe5G7sUSigOdyVib7:XClvSII22306sUPW

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1936	6d1be858f14b22d9fc24f5f136ef3b3b938bc4f3db28c15cef747de0c4226be0.exe
1936	6d1be858f14b22d9fc24f5f136ef3b3b938bc4f3db28c15cef747de0c4226be0.exe

C:\Users\Admin\AppData\Local\Temp\6d1be858f14b22d9fc24f5f136ef3b3b938bc4f3db28c15cef747de0c4226be0.exe
"C:\Users\Admin\AppData\Local\Temp\6d1be858f14b22d9fc24f5f136ef3b3b938bc4f3db28c15cef747de0c4226be0.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1936