b8a01def2d94cf9da992d125c713573694c355a6609121f05961c11cc0770cec

Analysis

user interaction
yes
max time kernel
300s
max time network
255s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/05/2026, 01:45

Target
Drift.exe
Size 1.8MB
Sample260505-b6nm8aev81
SHA256 b8a01def2d94cf9da992d125c713573694c355a6609121f05961c11cc0770cec
MD5 b2f44c3372387550fc3af8c758a1ed82
SHA1 bc7f5076b66c8d5ea8a4ec40a7cafd7af2a220d7
SHA512 3e50438bc66bba146db4d5d01943929ff8abb0bbef5403a7a165ab26ab801e43ba9a3db628808b6d861a013e20b01713aee0bd6f98cb6fbac427aa0e2d516b88
SSDEEP 24576:u1E1jXwUCbo8Fwze+dQK17YjGnggd94aKXNiJjnIpKuY8BK1tyFDG4OIKkM2N5xZ:u1cjgjosie+dQmUjMdhJjn2LOIr
TLSH
T15195BF1DB2E982FAC067D27CDF82E427E6B13C04172127EB77C14A1D2F676E08A75A15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4720	Drift.exe
4720	Drift.exe

C:\Users\Admin\AppData\Local\Temp\Drift.exe
"C:\Users\Admin\AppData\Local\Temp\Drift.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4720

memory/4720-0-0x0000024204240000-0x0000024204595000-memory.dmp

Download