20319ee11d9f9c71e4b887c6d221114d9892a76e44ecc5ae6f42ff4adf770b70

Analysis

user interaction
yes
max time kernel
38s
max time network
40s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/07/2026, 03:58

Target
clumsy.exe
Size 1.0MB
Sample260707-ejznraev7m
SHA256 20319ee11d9f9c71e4b887c6d221114d9892a76e44ecc5ae6f42ff4adf770b70
MD5 9311cf7394565df9acaf46abb9a4aeed
SHA1 9e8544b25752f3d60f556226d8de850f11105cbb
SHA512 3328a7e3afa04c6f5363e65c5249eb7441361c5421b8a37f772451ad14bd1160aa8083ec9164176f6107386fe42fa3c01bec17ba707577fed67a6f7bf5b6e310
SSDEEP 24576:QSNiSA5BtwW2Paw4ngDDc2Wk9c1S8ZCdzmX:QPSztawg2a1S8sJm
TLSH
T1F035181BD693A69CCA6BC170D67AA272B471BC1053307DEF1A20AB302E62DD0477FD59
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: LoadsDriver 4 IoCs

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3900	clumsy.exe

C:\Users\Admin\AppData\Local\Temp\clumsy.exe
"C:\Users\Admin\AppData\Local\Temp\clumsy.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:3900

C:\Users\Admin\AppData\Local\Temp\WinDivert64.sys
C:\Users\Admin\AppData\Local\Temp\WinDivert64.sys
1⤵
PID:2408

memory/3900-0-0x0000000062800000-0x0000000062813000-memory.dmp

Download