b7e9c5b63c2c22b58c792800a36025b878f88c79f3c81e0c990110da8c896672

Analysis

user interaction
yes
max time kernel
12s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/08/2026, 03:40

Target
donotrun.exe
Size 832KB
Sample260804-d8dbdavvht
SHA256 b7e9c5b63c2c22b58c792800a36025b878f88c79f3c81e0c990110da8c896672
MD5 e32ea9eab2fcc9ffbc1bda7fc569576f
SHA1 766f708ea5aaa80991c578eb94205df2c9f2a60a
SHA512 f8aec6d69fb5dff65d2053db0a972537dcdfbbec326fa2b2a81544ffaa20894b6c3e7156d8ec5299df5ebdba94046bb9cb588badee720ffc724fcff7534b14de
SSDEEP 12288:8tuueQ1++B54VDnoQQNzLMbSahYrFEpASGT0o5hnIJDH:8cU++YVDEXMXhYrKpALAIhnIJ
TLSH
T1BD05AD46F2E245FDE137A13985636317E7B47826073197DF23A04A16AFA77D08EBA310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1428	donotrun.exe
1428	donotrun.exe

C:\Users\Admin\AppData\Local\Temp\donotrun.exe
"C:\Users\Admin\AppData\Local\Temp\donotrun.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1428