3529658204a0b69beba7da75d34e5ce2aceef7da8d7929439959f625244ae1c2

Analysis

max time kernel
148s
max time network
122s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/07/2026, 17:33

Target
3529658204a0b69beba7da75d34e5ce2aceef7da8d7929439959f625244ae1c2.exe
Size 652KB
Sample260718-v4592agy8m
SHA256 3529658204a0b69beba7da75d34e5ce2aceef7da8d7929439959f625244ae1c2
MD5 fbbb41e1df3e228bca6e01d15c6a284b
SHA1 8e8d43044e439e0400dace8ea6f45b6ad6697d6e
SHA512 9b29adc6c59a886347185b08b28c320f7bf0b9f85c7085261a4cbe72e34bd4bfad701a818de2ac28b9d0648b75e4d22cc0fd6d78778c3fe4458272389bedcd7e
SSDEEP 6144:/IkhLxwoksag0+JVYkqKmlHA5W8SW9zEwbrwJawK3wXAuUUpDSmm7Iu:/ZwSagukqL6NT9zEwbgawo0pD2Iu
TLSH
T1A2E48E6177E412E6D0B7D13E8AD68F6AF6B2B8150720D7C701D442992F1BAE84E3F325
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2301830172-776172150-2531349243-1000_Classes\Local Settings	calc.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 1836 wrote to memory of 5312	1836	3529658204a0b69beba7da75d34e5ce2aceef7da8d7929439959f625244ae1c2.exe	90
PID 5312 wrote to memory of 3340	5312	calc.exe	91

C:\Users\Admin\AppData\Local\Temp\3529658204a0b69beba7da75d34e5ce2aceef7da8d7929439959f625244ae1c2.exe
"C:\Users\Admin\AppData\Local\Temp\3529658204a0b69beba7da75d34e5ce2aceef7da8d7929439959f625244ae1c2.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1836
- C:\Windows\SYSTEM32\calc.exe
  calc.exe
  2⤵
  - Modifies registry class
  - Suspicious use of WriteProcessMemory
  PID:5312
- - C:\Windows\System32\win32calc.exe
    "C:\Windows\System32\win32calc.exe"
    3⤵
    PID:3340