ccc78c124f64a95e5393fbbc19c7b937c681b145a74d351c36f19b19d99f3b9e

Analysis

max time kernel
150s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 08:21

Target
windows-amd64/helm.exe
Size 49.6MB
Sample260804-j85crazzaz
SHA256 ccc78c124f64a95e5393fbbc19c7b937c681b145a74d351c36f19b19d99f3b9e
MD5 769b1ff814ac0d923a187a8df4b612b5
SHA1 097f6b3e24e7911abbf6695c166019939516a85b
SHA512 6a52a885400adc6a9fa4e579e77ec7996179db2f626e398ae79a9181d755d23680afc4173efbac2e8d4a2d064a4a251adb07c2bc744e8aa48d222f1cc26ebe5a
SSDEEP 393216:kLm4dCKXTy/eYImI/tEHWlrDqC/h/MZl+ye/B4tGCEI/xiP1vjodaGlGQ8amn0bu:em4dCskYfnh4ITOF5EJH
TLSH
T16CB72947A89445E5C0EA9535C9718763BF727C895F2033C73E60B7282FBABD4A67A340
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

C:\Users\Admin\AppData\Local\Temp\windows-amd64\helm.exe
"C:\Users\Admin\AppData\Local\Temp\windows-amd64\helm.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2440