def14689022a7f2074d2ab82b04885b98c1ff895a798d4950c8dd640b7ef7379

Analysis

user interaction
yes
max time kernel
108s
max time network
109s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260130-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260130-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
27/04/2026, 16:55

Target
undetek-v10.27/undetek-v10.27.exe
Size 247KB
Sample260427-vfe3yaav5q
SHA256 def14689022a7f2074d2ab82b04885b98c1ff895a798d4950c8dd640b7ef7379
MD5 544e504caa250602ec81640e18b2b9d8
SHA1 81dc98d4022727acda5ace7a3ce677881618b7d8
SHA512 05a361ada206a172f6b634470a1ec0821b564903745caf1bef4bad97babbabf81f4e30a1f8ebbb6ddd6bb536c441250a613862e32ffc959c93db350a0334df00
SSDEEP 6144:Z7m83Cl/203hSgN2TKyd92r9e1zuqOya:1m83053hSgoTDdc9f
TLSH
T167444A4A76A989F1D4B2D639C54229BAF6B1BC048371D3CF03903927AF336E1D939791
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3272	undetek-v10.27.exe
3272	undetek-v10.27.exe

C:\Users\Admin\AppData\Local\Temp\undetek-v10.27\undetek-v10.27.exe
"C:\Users\Admin\AppData\Local\Temp\undetek-v10.27\undetek-v10.27.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3272