Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
17/05/2026, 17:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FH6-DBDUMPER.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
FH6-DBDUMPER.exe
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target FH6-DBDUMPER.exe
- Size 1.3MB
- Sample260517-werwsafv4p
- SHA256 5b45fd14bebc7a2d5036ec52cc9eeda37c09f79df2c5d0bfedbcf78ad1b3ff34
- MD5 1f526a8a83a27c38c0111d93c786618e
- SHA1 840e7eb9ce42066bc78bf8233354c749ab3101b5
- SHA512 8d25262e1887fd80d1cbab74a1dd76f49d52b063d80d09a0628b52c68a11b1a1fbe7900b2c8ffc322507336edb6bed381af71a4f2037ca1841924cdd97e1f673
- SSDEEP 24576:3hRlF9px7I5s2vFgCRFrT/l+vBvdlkKuZrkPs1sJZldVeh0lhSMXl9u05Jvfd4:jXAZzsBXuSs1sJfL80Hvfd4
- TLSH T1B355AF06B3B940FCD157C178CA066A17EBB3780513789BDB5690856AAF23FE11B7E324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe 3888 FH6-DBDUMPER.exe