d0cd19d269c4907aef95f4d7a9dc0c59589159bff4b3d0dc3cafc40e5b64cd6d

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/06/2026, 10:31

Target
Aqua.exe
Size 6.5MB
Sample260620-mkw81set8m
SHA256 d0cd19d269c4907aef95f4d7a9dc0c59589159bff4b3d0dc3cafc40e5b64cd6d
MD5 3e576718bec39f006a27db2b8e5d9284
SHA1 89af2cee4c8c5791673055b979fe71491b9b8547
SHA512 6b525b426defb133cb0c818e67e45e05cb9611d7634949c256a7285f7f2b0e9a43ac8e6a316baf850953ec9613bf41856c52d7c2a7428deca8b04b78cb3fc5ee
SSDEEP 196608:Xpyax8fmTf2TXdg4N8JqDMcpWlSgw+vNi:Xpya2f8qNgzqDHp6F8
TLSH
T10F66E047BCE109F6C4AAA2718976A1927B61BC451F3223D32F60B3782F72BE09D75714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
976	Aqua.exe
976	Aqua.exe

C:\Users\Admin\AppData\Local\Temp\Aqua.exe
"C:\Users\Admin\AppData\Local\Temp\Aqua.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:976

memory/976-0-0x0000014563840000-0x000001456388E000-memory.dmp

Download