5483e155e5fd36a5f87ecc6ce7a64fbf614f513f1a98ec0d1ada4cbe3bc3b1e6

Analysis

max time kernel
898s
max time network
379s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
06/06/2026, 15:44

Target
Elpepe_[unknowncheats.me]_.exe
Size 390KB
Sample260606-s6ffaah18j
SHA256 5483e155e5fd36a5f87ecc6ce7a64fbf614f513f1a98ec0d1ada4cbe3bc3b1e6
MD5 b2b93d2710df92c431a40492893e89aa
SHA1 234204c77d3b498e106308cb514644f16b4755b9
SHA512 024c9e320e06ba405ca0a617c8a33a57d80832848e3713efe676bbed22c9fd826e04c426cf9322b5d779aa5c1578a91023f590151b0717187bac5d9f8887bdd1
SSDEEP 6144:7rxKGmVJfKEQagkN4UVxdcaK1Dru9Hq12OV8cHlwnvAXhfO+:BGHgFa5Khru9KsOSSmnYXhm+
TLSH
T11E847E45F6A154E5E01BA078A17BB60BFA71348C17508AD773F849582FF37E09BBA702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 3716 wrote to memory of 2428	3716	Elpepe_[unknowncheats.me]_.exe	82

C:\Users\Admin\AppData\Local\Temp\Elpepe_[unknowncheats.me]_.exe
"C:\Users\Admin\AppData\Local\Temp\Elpepe_[unknowncheats.me]_.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3716
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cls
  2⤵
  PID:2428