4ad22e0c2974defaf9a3c21408093a92c9a7091b40b537d741e0b993687a6d0f

Resubmissions

27/10/2026, 08:26

27/10/2026, 08:22

max time kernel
148s
max time network
132s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 08:22

Target
Invoice20261027-1532654842.exe
Size 842KB
Sample261027-j9pzfsswcs
SHA256 4ad22e0c2974defaf9a3c21408093a92c9a7091b40b537d741e0b993687a6d0f
MD5 779d70322c7851878b97f32bcfbe7240
SHA1 47a5a02f4f24cd539bb80754f4aadb278c4fc247
SHA512 45fb4a137e275e32c97b4434f026973660ceefc4204dfc3a4ed8a911a0928b1ff07d177d331ef61da0f74af0e620ef788ce4ad234e8a600ff453e741c4a73458
SSDEEP 12288:34nlIWnN2rfmfOlso02Qz72EnAonrkUkPYsAvw2:dWnYr+OsoHQziEAMBhY2
TLSH
T1B2058C5DA2A404E9D47B9139C9C13637E6B2B885076097DB13A0966B2F336D31FFE321
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2532	Invoice20261027-1532654842.exe
2532	Invoice20261027-1532654842.exe

C:\Users\Admin\AppData\Local\Temp\Invoice20261027-1532654842.exe
"C:\Users\Admin\AppData\Local\Temp\Invoice20261027-1532654842.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2532

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1888