eb4e4fac05c3debb4945d0e291da99362f49832c69c24458e96776b7ae711775

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/08/2026, 04:06

Target
CCS-Project Retrac/KDMapper.exe
Size 150KB
Sample260810-epaa2s1blh
SHA256 eb4e4fac05c3debb4945d0e291da99362f49832c69c24458e96776b7ae711775
MD5 1c6cb4a8f2a46c28dda107b4082df269
SHA1 ffc0e17a50ff7c18560f19d77d190eecfd40f591
SHA512 e8c1e3cde49a16ed7c932c0cb54f1065c599623edda478ecda382e3b4d46ac2e90837762238f46f539d2b8dfa62ad5c4c3f1901d983416f8835ef6845f5d28d4
SSDEEP 3072:UdbUjZEbbIDfVEz9kwUmJTQSaMm5/6o5WM9NIw:gUZEbbqfIScWlT8
TLSH
T1C4E31A1797A5106EE1B7D6B9CAB24911EB727C550B74D2CF135048BA0F32BD0BA3EB12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1592	KDMapper.exe
1592	KDMapper.exe

C:\Users\Admin\AppData\Local\Temp\CCS-Project Retrac\KDMapper.exe
"C:\Users\Admin\AppData\Local\Temp\CCS-Project Retrac\KDMapper.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1592