0b62f1d97a8e16be8d2239d59da76d43a3d8542e03cb0939a4c4d24ea5828b08

Analysis

max time kernel
150s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/07/2026, 04:48

Target
0b62f1d97a8e16be8d2239d59da76d43a3d8542e03cb0939a4c4d24ea5828b08.exe
Size 11KB
Sample260720-ffed3shy7v
SHA256 0b62f1d97a8e16be8d2239d59da76d43a3d8542e03cb0939a4c4d24ea5828b08
MD5 b4bd811eae03c124c70436edf4e31f39
SHA1 8c4b2ff03dd8b701db8fdc6ddd52ab78c2e742b5
SHA512 637f3ce9f74d74e09c1b21a67b22dface7dc7b26466d90ff844da9c7e3194e778d937cff9a8e95b4a64a902dee98a350e4942fd15647cdde44ac6a31b03c37bb
SSDEEP 96:LBeHbqJzlhdeYuWLWkXDJgrbfEcZIK409/ttzJjEQMH9xm73Q5tfdSE5Sn2Y3xS:LBe7qDNyx3/ttzJj7MdU3Q5tfdL5D
TLSH
T190324C8AFAA189FAD46D8178C47B054FE035B7025762578B23B941262EA23F27D163CD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2301830172-776172150-2531349243-1000_Classes\Local Settings	calc.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 2944 wrote to memory of 5264	2944	0b62f1d97a8e16be8d2239d59da76d43a3d8542e03cb0939a4c4d24ea5828b08.exe	89
PID 5264 wrote to memory of 5548	5264	calc.exe	90

C:\Users\Admin\AppData\Local\Temp\0b62f1d97a8e16be8d2239d59da76d43a3d8542e03cb0939a4c4d24ea5828b08.exe
"C:\Users\Admin\AppData\Local\Temp\0b62f1d97a8e16be8d2239d59da76d43a3d8542e03cb0939a4c4d24ea5828b08.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2944
- C:\Windows\SYSTEM32\calc.exe
  calc.exe
  2⤵
  - Modifies registry class
  - Suspicious use of WriteProcessMemory
  PID:5264
- - C:\Windows\System32\win32calc.exe
    "C:\Windows\System32\win32calc.exe"
    3⤵
    PID:5548