79bdf1d0141abd8e2f36c712c9269b73b24f4d2f9a809d7c333035ef4cfb7c02

Analysis

max time kernel
148s
max time network
131s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/07/2026, 06:08

Target
79bdf1d0141abd8e2f36c712c9269b73b24f4d2f9a809d7c333035ef4cfb7c02.exe
Size 107KB
Sample260720-gv9zzaaz71
SHA256 79bdf1d0141abd8e2f36c712c9269b73b24f4d2f9a809d7c333035ef4cfb7c02
MD5 f04616d2cbdba71d60ea3f782208b72d
SHA1 55bc4508aaecff81f0bf291a5864e405951615d8
SHA512 88eaa600bfb05fe966c175d909ff7f3c6c4e0fdc8d43b259558534e6b7c3c0cfbcd7440c96dc1cc917cfd024d3dbc2d3093f29e18bf696e53ec90d31caa36bfb
SSDEEP 1536:RCw+12vcsnfqviObADdxSPfaljwgxXOCW7JDYX8CsWYdYz9dlGN8ra:0whfbuADIf60gxXtiJEMVwYN8ra
TLSH
T174B36B5BB7A530F8E5778678C8910A41D772B83217A09FAF07B446861F632D18D3EF61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings	calc.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 5576 wrote to memory of 2372	5576	79bdf1d0141abd8e2f36c712c9269b73b24f4d2f9a809d7c333035ef4cfb7c02.exe	89
PID 2372 wrote to memory of 2960	2372	calc.exe	91

C:\Users\Admin\AppData\Local\Temp\79bdf1d0141abd8e2f36c712c9269b73b24f4d2f9a809d7c333035ef4cfb7c02.exe
"C:\Users\Admin\AppData\Local\Temp\79bdf1d0141abd8e2f36c712c9269b73b24f4d2f9a809d7c333035ef4cfb7c02.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5576
- C:\Windows\SYSTEM32\calc.exe
  calc.exe
  2⤵
  - Modifies registry class
  - Suspicious use of WriteProcessMemory
  PID:2372
- - C:\Windows\System32\win32calc.exe
    "C:\Windows\System32\win32calc.exe"
    3⤵
    PID:2960