56052831ca8aab0db86ddf9c530ab3a600ff9055b961ddb10bdb8bc23814f074

Analysis

max time kernel
30s
max time network
32s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/07/2026, 04:14

Target
rewind-6adff8cd.exe
Size 484KB
Sample260722-etr2nacr51
SHA256 56052831ca8aab0db86ddf9c530ab3a600ff9055b961ddb10bdb8bc23814f074
MD5 4ecb18a47b770f686c0eaef35df7daae
SHA1 301fcb109d63fb8785be1a071e9a9926e6de864e
SHA512 c7d2e6593bef98a8d65379c9708c38154e2eba7712f7d9873c4cfde94f5c93d9979d9a9e8c39262a6e130968aa238517244eabfbb4c6fa24cc2459d8386c20ff
SSDEEP 12288:k6axn8jZxrxLjOGZIm9HJgFrbMCFYiXnn:k9+jR7ZImxiFr49iXnn
TLSH
T18CB4AF87F1BE97E8C06BD034E556AA0FED32345C036059DB63E449A41BA77F097BB242
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
916	rewind-6adff8cd.exe
916	rewind-6adff8cd.exe

C:\Users\Admin\AppData\Local\Temp\rewind-6adff8cd.exe
"C:\Users\Admin\AppData\Local\Temp\rewind-6adff8cd.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:916