879ecb614d9a8b7d41fe7d7b6a2c42a93b151161be6ceca24f61addb38da2973

Analysis

user interaction
yes
max time kernel
12s
max time network
4s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/07/2026, 18:18

Target
kdmapper.exe
Size 150KB
Sample260728-wxpjdaag97
SHA256 879ecb614d9a8b7d41fe7d7b6a2c42a93b151161be6ceca24f61addb38da2973
MD5 76f397d6e9153633fdf3fa7bbb9b7c65
SHA1 3f9da91b5f4b88f6d46a9ec4791acca4c763b829
SHA512 0e2c863e2c52ae79e223fbab24a7b732709bb713f1328204556cbe83c32748067bec5f759f8f0b3bd9a6d73ecd98d8ef0abc209966d0872dfd5b137f25da50b6
SSDEEP 3072:pNgVrsyfheksDQFqOMkwZmJTQSaMm5/6yPLCQ:M++hedQ/VFWllDC
TLSH
T128E32A179BA51029E1B7D6B9CAB20911EB717C550B74E6CF135048BA0E72BD0BE3EB12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4960	kdmapper.exe
4960	kdmapper.exe

C:\Users\Admin\AppData\Local\Temp\kdmapper.exe
"C:\Users\Admin\AppData\Local\Temp\kdmapper.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4960