6af7e3e812de0422892cd96c97bd843aeaf6cc61503fc381bef64a5e942885d2

Analysis

max time kernel
150s
max time network
155s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 17:17

Target
6af7e3e812de0422892cd96c97bd843aeaf6cc61503fc381bef64a5e942885d2.exe
Size 10.9MB
Sample260727-vtnl8san91
SHA256 6af7e3e812de0422892cd96c97bd843aeaf6cc61503fc381bef64a5e942885d2
MD5 9348b3893a336fdfcde8c7d18c871c5b
SHA1 8c6e97548a7507202254a1f63687d60bc082c512
SHA512 c88432f2a58be3b1a6889cbe8226e46e33e07d0717c402d59c6e92122ad492e925e5262ad94704a84f81932254111c7352a5b434af397bffd39b0b6e55519f1c
SSDEEP 196608:fRrozdyyVhfyhapsANAu1J1EyLfVbrVdkCsA6OXPhXvn:JrozdyyVhMosANAuvawf2LAxJf
TLSH
T13AB6AE939298696ED913FE3C0A0190CAF049F0155BD7D7E38EEB0D3A29BBE014C55EB5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
4988	Uninstall.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 5076 wrote to memory of 4988	5076	6af7e3e812de0422892cd96c97bd843aeaf6cc61503fc381bef64a5e942885d2.exe	89

C:\Users\Admin\AppData\Local\Temp\6af7e3e812de0422892cd96c97bd843aeaf6cc61503fc381bef64a5e942885d2.exe
"C:\Users\Admin\AppData\Local\Temp\6af7e3e812de0422892cd96c97bd843aeaf6cc61503fc381bef64a5e942885d2.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5076
- C:\Users\Admin\AppData\Local\Temp\Uninstall.exe
  C:\Users\Admin\AppData\Local\Temp\Uninstall.exe "C:\Users\Admin\AppData\Local\Temp\"
  2⤵
  - Executes dropped EXE
  PID:4988

Uninstall.exe

Path C:\Users\Admin\AppData\Local\Temp\Uninstall.exe
Size 10.9MB
SHA256 6af7e3e812de0422892cd96c97bd843aeaf6cc61503fc381bef64a5e942885d2
MD5 9348b3893a336fdfcde8c7d18c871c5b
SHA1 8c6e97548a7507202254a1f63687d60bc082c512
SHA512 c88432f2a58be3b1a6889cbe8226e46e33e07d0717c402d59c6e92122ad492e925e5262ad94704a84f81932254111c7352a5b434af397bffd39b0b6e55519f1c
SSDEEP 196608:fRrozdyyVhfyhapsANAu1J1EyLfVbrVdkCsA6OXPhXvn:JrozdyyVhMosANAuvawf2LAxJf
TLSH
T13AB6AE939298696ED913FE3C0A0190CAF049F0155BD7D7E38EEB0D3A29BBE014C55EB5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download