b4d85a95caaf14d0b2cbf9b9f66103964c601e63ced3a7b66143b40ca5f1c340

Analysis

user interaction
yes
max time kernel
148s
max time network
115s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/07/2026, 13:06

Target
chef-bobby.exe
Size 6.4MB
Sample260715-qcc2ysc14m
SHA256 b4d85a95caaf14d0b2cbf9b9f66103964c601e63ced3a7b66143b40ca5f1c340
MD5 b822f434df3c52a93539300c5c39506f
SHA1 24ec9181786e6c817203781970e3162227c02ffd
SHA512 4c75ed5f5e4f1977f9800438a9797ebcddd8090a9d385a0de0b3d0da98fc1870fefc575a65d2acf54ff1cdeb52d777b91fe4d3952b00881c92bf1e96265e083c
SSDEEP 49152:rJobMnNhMxJTRVxpCGpANLyBA5Cn7yDLBU5VsUF39fec+uNHdcTic/Tm:r/Wn7yDLu2Vu
TLSH
T17D665B47BC9149E5C8AE9235886792923B70BC580F3167C33B50B77C2F76BD05ABA748
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: AddClipboardFormatListener 10 IoCs

C:\Users\Admin\AppData\Local\Temp\chef-bobby.exe
"C:\Users\Admin\AppData\Local\Temp\chef-bobby.exe"
1⤵
- Suspicious behavior: AddClipboardFormatListener
PID:3776

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5792

C:\Users\Admin\AppData\Local\Temp\chef-bobby.exe
"C:\Users\Admin\AppData\Local\Temp\chef-bobby.exe"
1⤵
- Suspicious behavior: AddClipboardFormatListener
PID:472

C:\Users\Admin\AppData\Local\Temp\chef-bobby.exe
"C:\Users\Admin\AppData\Local\Temp\chef-bobby.exe"
1⤵
- Suspicious behavior: AddClipboardFormatListener
PID:5844

C:\Users\Admin\AppData\Local\Temp\chef-bobby.exe
"C:\Users\Admin\AppData\Local\Temp\chef-bobby.exe"
1⤵
- Suspicious behavior: AddClipboardFormatListener
PID:3732

C:\Users\Admin\AppData\Local\Temp\chef-bobby.exe
"C:\Users\Admin\AppData\Local\Temp\chef-bobby.exe"
1⤵
- Suspicious behavior: AddClipboardFormatListener
PID:4324

C:\Users\Admin\Desktop\chef-bobby.exe
"C:\Users\Admin\Desktop\chef-bobby.exe"
1⤵
- Suspicious behavior: AddClipboardFormatListener
PID:3740

C:\Users\Admin\Desktop\chef-bobby.exe
"C:\Users\Admin\Desktop\chef-bobby.exe"
1⤵
- Suspicious behavior: AddClipboardFormatListener
PID:2568

C:\Users\Admin\Desktop\chef-bobby.exe
"C:\Users\Admin\Desktop\chef-bobby.exe"
1⤵
- Suspicious behavior: AddClipboardFormatListener
PID:1444

C:\Users\Admin\Desktop\chef-bobby.exe
"C:\Users\Admin\Desktop\chef-bobby.exe"
1⤵
- Suspicious behavior: AddClipboardFormatListener
PID:2972

C:\Users\Admin\Desktop\chef-bobby.exe
"C:\Users\Admin\Desktop\chef-bobby.exe"
1⤵
- Suspicious behavior: AddClipboardFormatListener
PID:3576