63df7707b7abca25c622fc7bc09aa72c797ce6d04f60649c7417b916717e55a2

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/06/2026, 18:12

Target
BB_REC/BB_Recorder.exe
Size 13.2MB
Sample260624-wtaaaaes4w
SHA256 63df7707b7abca25c622fc7bc09aa72c797ce6d04f60649c7417b916717e55a2
MD5 187b1aa4c7c80a063086966adea13f33
SHA1 7be34c94018b77737d698d6c6c23c4c158509964
SHA512 6504e14a7841c513fedc49269e47fda9ae994319c138fcb6482633d92df00724591427f821cb84607dcc454e1039c01d40a4025a5eb05584ebb50a98a3e8b7d1
SSDEEP 98304:nHFvCJG4rTrruj3+6hUEuQw5ssvu43/ahymVTYY0UVOeYzZpcJj8Cf06UkrLJKkR:lv6rn0dj/wBvF/kP5VBM6UkrLr7d
TLSH
T120D6AF11B3E94F2AD9AF1B35E0B1421047B2F846B793E74F6A88A5F85D937501E063E3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4952	BB_Recorder.exe

C:\Users\Admin\AppData\Local\Temp\BB_REC\BB_Recorder.exe
"C:\Users\Admin\AppData\Local\Temp\BB_REC\BB_Recorder.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:4952