a16566553e6e8f2f82dec5b255b209f46746231a79883075a754d996a0d78f0f

Analysis

user interaction
yes
max time kernel
150s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/07/2026, 04:36

Target
lucille.exe
Size 1.2MB
Sample260722-e8fbeavzcy
SHA256 a16566553e6e8f2f82dec5b255b209f46746231a79883075a754d996a0d78f0f
MD5 8df41e7b395fc0ff5251caa34c1eee6b
SHA1 618209ec200333ad779106a20e321ead0ebd1c00
SHA512 688c7d4b8545c278d929b4c21abe809ec7fab1bedaa4a6549ee6caad2cf1a5a754a7f7ca6ae81b6efa648a372b8a0399b745840c191aa5c76038033864f07b82
SSDEEP 24576:Vg8fq/an8UZCcUWZQH0CVWlpA5VxehlJqi4n5EpQJpjB:Vgsq/an8UUcvBCVWrOxehlJz4n5wQjj
TLSH
T19045BF0A71A110E8D4BAE074D692B917F671344C13709BEB27F01A499FBB7E11ABBF11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5076	lucille.exe
5076	lucille.exe

C:\Users\Admin\AppData\Local\Temp\lucille.exe
"C:\Users\Admin\AppData\Local\Temp\lucille.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5076