7b16382c24a5fdfa20c22ba76f483b6c840ace2cc0fc1e7934a37b67adc54627

Analysis

max time kernel
148s
max time network
131s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/07/2026, 17:27

Target
7b16382c24a5fdfa20c22ba76f483b6c840ace2cc0fc1e7934a37b67adc54627.exe
Size 652KB
Sample260718-v1devabz5w
SHA256 7b16382c24a5fdfa20c22ba76f483b6c840ace2cc0fc1e7934a37b67adc54627
MD5 6ef6c69fa1b924a2a2dcdb72926c22d1
SHA1 b6f3a37a1d9a12bea3a1548bea256067d9369b7b
SHA512 fb0e337c787f10b3a119d10c753875c3a3332c97511412cd0fe17430d38538cf8ab376dd2c8044412b482f70fc4f566e7532be43865cc85308f84a6b3e0e938a
SSDEEP 6144:BfDKo6eWOkROP5xRhgr+3d1R4CvucmD2KMqaHZpq+KGr7uWK32ZYr21u:dKoClOzgrKd1R4KfU2Bq4ZrQ32aq1u
TLSH
T110E49F6177E412EAD1B7D13E8AD68F6AF6B2B8150720D7C701D442592F2BAE84E3F311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings	calc.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 556 wrote to memory of 3788	556	7b16382c24a5fdfa20c22ba76f483b6c840ace2cc0fc1e7934a37b67adc54627.exe	89
PID 3788 wrote to memory of 3976	3788	calc.exe	90

C:\Users\Admin\AppData\Local\Temp\7b16382c24a5fdfa20c22ba76f483b6c840ace2cc0fc1e7934a37b67adc54627.exe
"C:\Users\Admin\AppData\Local\Temp\7b16382c24a5fdfa20c22ba76f483b6c840ace2cc0fc1e7934a37b67adc54627.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:556
- C:\Windows\SYSTEM32\calc.exe
  calc.exe
  2⤵
  - Modifies registry class
  - Suspicious use of WriteProcessMemory
  PID:3788
- - C:\Windows\System32\win32calc.exe
    "C:\Windows\System32\win32calc.exe"
    3⤵
    PID:3976