bdb6c70f1f1bb91baaff0327dec1b9802c915d307a56de893fe21d3d9d05531f

Analysis

max time kernel
149s
max time network
114s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/05/2026, 23:18

Target
Kovaaks External_[unknowncheats.me]_.exe
Size 340KB
Sample260504-3almjadw2t
SHA256 bdb6c70f1f1bb91baaff0327dec1b9802c915d307a56de893fe21d3d9d05531f
MD5 9758dbf3263952e94c96284ae579ed7f
SHA1 4b859c548eb946ceb3675df3f5220d8f589e3c39
SHA512 88744164a8078f12341426bdf0cfc116cc608feba593bce8bc25b6fd443016e88990e5d3bd4da30a726b8b331fc8a35415811f634813182ad2179c814657418e
SSDEEP 6144:aoziYuQ1YP+RZjW2QPzC/RVIgAAn3oUq/hFDvVeBnbevqEwzz:an+RJLIKn3QEBnbx
TLSH
T15774AE86F2B454E9D4676038929BB30FF978385807504ADB73E849583BD36E0BDFA361
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4964	Kovaaks External_[unknowncheats.me]_.exe
4964	Kovaaks External_[unknowncheats.me]_.exe

C:\Users\Admin\AppData\Local\Temp\Kovaaks External_[unknowncheats.me]_.exe
"C:\Users\Admin\AppData\Local\Temp\Kovaaks External_[unknowncheats.me]_.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4964