e48f6cf038c5fe69e4fe1c7a224df32e963a48a82ea428dfa38a5dcf221cad7c

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/08/2026, 14:04

Target
nf6dr9.exe
Size 150KB
Sample260813-rdb2qa1sg1
SHA256 e48f6cf038c5fe69e4fe1c7a224df32e963a48a82ea428dfa38a5dcf221cad7c
MD5 1dfa88a8807eecb32e106c1b2c82bc44
SHA1 79456941b6c816ce3fe8d4ad3137d80e0c1c8a3d
SHA512 91df5fcec141bde821e05014333cc71c653c0598bc71b4f093bb07a677747e3104cd9e42b860efbec9caa57d53c76e078f051d8ed8505c696d252f70d8739cac
SSDEEP 3072:0QeuLZ8OB7/Us7sMDcFS0DzbskwBmJTQSaMm5/6Y5vg8h:0gNpBDUs7ncFSQ31JWljGQ
TLSH
T1A7E32A1797A9106EE1B7D6B9CAB24A11EB717C550B74D2CF135048BA0F327D0BA3EB12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5780	nf6dr9.exe
5780	nf6dr9.exe

C:\Users\Admin\AppData\Local\Temp\nf6dr9.exe
"C:\Users\Admin\AppData\Local\Temp\nf6dr9.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5780