bbc96b637df09136b32d90ce06839baf35a0c4231ed89d97ca67ed9fae77d354

Analysis

user interaction
yes
max time kernel
28s
max time network
30s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/09/2026, 04:08

Target
NeverBlox.exe
Size 1.8MB
Sample260907-eqm9asef28
SHA256 bbc96b637df09136b32d90ce06839baf35a0c4231ed89d97ca67ed9fae77d354
MD5 9946c20653cad845694199a6f0ec21f9
SHA1 039b4e7e12ef953abb228c7409d4e6191a1b6701
SHA512 efd1d78c012a879805b89488cd06940079c3ae33e3f46e27895923e80615768d055054d349432c28ee18aa2f3c66d9bdde9ffd00da0f3f08ee6fde8d185a1a0b
SSDEEP 24576:80LMJyVk/Kac5acartsvVAP+I1PcH95wkENZclnQ8BK1tyFDG4OIKkM2N5xy:80LMJyyC95acc0cP85wmnJLOI
TLSH
T16B95AE8AF3EA82E9C157C17C8B91E627E2B07C05131037EBBBD09A1D2E57AD06B75315
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 6 IoCs

C:\Users\Admin\AppData\Local\Temp\NeverBlox.exe
"C:\Users\Admin\AppData\Local\Temp\NeverBlox.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1264