2a8b70cecbf1a9970cc8b0f2e2f8d0b2b13d7b05e4ee12cb23cf50d236166049

Analysis

max time kernel
148s
max time network
12s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/08/2026, 11:33

Target
4ff5fe4e66d8f65cdfc2a3b16720cdbd3f7908fc7d861b8810293703aa61c0be.exe
Size 1.3MB
Sample260830-nnzc8ack5t
SHA256 2a8b70cecbf1a9970cc8b0f2e2f8d0b2b13d7b05e4ee12cb23cf50d236166049
MD5 57d80cba964862b95ffd978543b7ff3e
SHA1 749cd84c573d0f529395b169d0a04c6ea2d9d474
SHA512 549b68bbb8d49c1336517b10cb5ca4fd0ac5c926481ff046ed46910d7fc54aea643a853a4c49149085956f5d8c3cca9fd79930acc0fe6d47ca7b8d655da0d9e6
SSDEEP 12288:A5C/oLYXGgfcKf+fkX6VzeGQzwFrSOYB:x/RXSgpG0w8
TLSH
T185551E8ED58213B5B393FB67A21AD6329DF6310580728635CF85AD359F02F24A02DEDD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
5488	4ff5fe4e66d8f65cdfc2a3b16720cdbd3f7908fc7d861b8810293703aa61c0be.exe
5488	4ff5fe4e66d8f65cdfc2a3b16720cdbd3f7908fc7d861b8810293703aa61c0be.exe
5488	4ff5fe4e66d8f65cdfc2a3b16720cdbd3f7908fc7d861b8810293703aa61c0be.exe
5488	4ff5fe4e66d8f65cdfc2a3b16720cdbd3f7908fc7d861b8810293703aa61c0be.exe
5488	4ff5fe4e66d8f65cdfc2a3b16720cdbd3f7908fc7d861b8810293703aa61c0be.exe
5488	4ff5fe4e66d8f65cdfc2a3b16720cdbd3f7908fc7d861b8810293703aa61c0be.exe

C:\Users\Admin\AppData\Local\Temp\4ff5fe4e66d8f65cdfc2a3b16720cdbd3f7908fc7d861b8810293703aa61c0be.exe
"C:\Users\Admin\AppData\Local\Temp\4ff5fe4e66d8f65cdfc2a3b16720cdbd3f7908fc7d861b8810293703aa61c0be.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5488

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3544