ca06b2b18b51e75877a176a829da4229de6752946768aba5772b804e504caeaf

Analysis

user interaction
yes
max time kernel
8s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
24/10/2026, 15:12

Target
vesta.exe
Size 4.9MB
Sample261024-sld2qaaw5s
SHA256 ca06b2b18b51e75877a176a829da4229de6752946768aba5772b804e504caeaf
MD5 71b1adebc14054946409fdf0aef2e565
SHA1 3e944a3eaf2f109af98256d354618febaae914d0
SHA512 1f877ae7323d62f5db1cc7f43b6a9837b15ad4c5d74edef2f3a5c28270db931ebb62a177eb0a53bd6801da91cb62d298a2d1d168d0996eb791e1c5ae530ce168
SSDEEP 49152:vPI2P0zDNGgTsPfD6wC9bn8D/o3mwVFd2kldZs/+5vn/Pi8ThgKKlCOrX26Km6Qm:U7IdgBJ/qM7+rKm6cp8KWd6Lo/S8
TLSH
T15C36BE57A2E801EDD037C139CAAADA13E775745643701BEF36AC4A6A1F736E01E3A311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3272	vesta.exe
3272	vesta.exe

C:\Users\Admin\AppData\Local\Temp\vesta.exe
"C:\Users\Admin\AppData\Local\Temp\vesta.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3272