6927cb7245652a3b66f1a4517189c7cd08056875e09e267a29fe13f1d3bd4d1d

Analysis

user interaction
yes
max time kernel
898s
max time network
451s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
10/08/2026, 00:26

Target
bad_apple.exe
Size 4.8MB
Sample260810-arpfjayajd
SHA256 6927cb7245652a3b66f1a4517189c7cd08056875e09e267a29fe13f1d3bd4d1d
MD5 6a022e937a774f6da038da4634b0fc40
SHA1 f204d69f3a78629a85f10bd7d2768b6fc3cbd7db
SHA512 752643d0bc50dd82d7cb82dd8e7acea72859a1f57eff9635fcac0950e73bc2fda1228e8e1405a6cc92ea364f8026e24f4fb88d55f5e92bfe82214dffbe76ca4d
SSDEEP 98304:a8/kJbJDGSdmWaeGzkbqrR7uO3kHQHgHCPfF72yt+7o7W9XXn7z8:a8/k3DGc6QqrZHgHC3LtvS9Hn7
TLSH
T153361243E28519FCD0BEC078479B6533F679BC4C4721B6DB4EE059212E2ABE06F29746
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

C:\Users\Admin\AppData\Local\Temp\bad_apple.exe
"C:\Users\Admin\AppData\Local\Temp\bad_apple.exe"
1⤵
PID:4772

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1672

C:\Users\Admin\AppData\Local\Temp\bad_apple.exe
"C:\Users\Admin\AppData\Local\Temp\bad_apple.exe"
1⤵
PID:1212

C:\Users\Admin\AppData\Local\Temp\bad_apple.exe
"C:\Users\Admin\AppData\Local\Temp\bad_apple.exe"
1⤵
PID:988

C:\Users\Admin\AppData\Local\Temp\bad_apple.exe
"C:\Users\Admin\AppData\Local\Temp\bad_apple.exe"
1⤵
PID:5076

C:\Users\Admin\AppData\Local\Temp\bad_apple.exe
"C:\Users\Admin\AppData\Local\Temp\bad_apple.exe"
1⤵
PID:1044

C:\Users\Admin\AppData\Local\Temp\bad_apple.exe
"C:\Users\Admin\AppData\Local\Temp\bad_apple.exe"
1⤵
PID:3364

C:\Users\Admin\AppData\Local\Temp\bad_apple.exe
"C:\Users\Admin\AppData\Local\Temp\bad_apple.exe"
1⤵
PID:4980

C:\Users\Admin\AppData\Local\Temp\bad_apple.exe
"C:\Users\Admin\AppData\Local\Temp\bad_apple.exe"
1⤵
PID:3844

C:\Users\Admin\AppData\Local\Temp\bad_apple.exe
"C:\Users\Admin\AppData\Local\Temp\bad_apple.exe"
1⤵
PID:4684

C:\Users\Admin\AppData\Local\Temp\bad_apple.exe
"C:\Users\Admin\AppData\Local\Temp\bad_apple.exe"
1⤵
PID:1872

C:\Users\Admin\AppData\Local\Temp\bad_apple.exe
"C:\Users\Admin\AppData\Local\Temp\bad_apple.exe"
1⤵
PID:5112

C:\Users\Admin\AppData\Local\Temp\bad_apple.exe
"C:\Users\Admin\AppData\Local\Temp\bad_apple.exe"
1⤵
PID:4192