c2e7a10312b5abe58a87058befb3bd795a10bd5621ec17d9518a96da5b10c48a

Analysis

max time kernel
149s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
17/05/2026, 01:27

Target
inferno.exe
Size 4.0MB
Sample260517-bt45fae13l
SHA256 c2e7a10312b5abe58a87058befb3bd795a10bd5621ec17d9518a96da5b10c48a
MD5 657eccfe53c2d33129d2e9e9a5de5476
SHA1 81557b988de612afd3af20f51047d284aac9f6cf
SHA512 9e7f92da844447634281f592f4755cf3a96bc3b1283cc821b70dde5caf9c1116030307e074fccf05c4023298e25e6591896374f2f45db6bddc2f7a4c7f6b84bb
SSDEEP 49152:gRWfkImdevIZPq6bvytF30ErvE0XSulZqA9P0FRS1ICQvj9QAHOz:zkzPq6b4eulZqA9P0FRZNZbO
TLSH
T15B16AE02B291D298C52A9538CD11DAABD331BC045F12D7EB32A87F2B7E732E11E75791
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 5048 wrote to memory of 3348	5048	inferno.exe	81

C:\Users\Admin\AppData\Local\Temp\inferno.exe
"C:\Users\Admin\AppData\Local\Temp\inferno.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:5048
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cls
  2⤵
  PID:3348