b79a4e0b6e426381ddfe209220ec9c8f395e9125535b6056d7322c0dafc55f9d

Analysis

max time kernel
65s
max time network
71s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
19-09-2022 02:56

Target

b79a4e0b6e426381ddfe209220ec9c8f395e9125535b6056d7322c0dafc55f9d.exe
Size

40KB
MD5

754d4a7e0a409ba9fbcf8371b7c377b5
SHA1

542c1ddc7f240b11454ee75763f84500883052ff
SHA256

b79a4e0b6e426381ddfe209220ec9c8f395e9125535b6056d7322c0dafc55f9d
SHA512

8a99b7172c55abdca71d79d44c938f88e8c07849d1fec2378861a0b5496664f50463933b8a8cad038b175519a3e977f95879878fb88492196eb13f1a70f115d9
SSDEEP

768:7iKP5JWWs3pj1u2T3yetVqtqVKkYrRL2W:Taj3ZVt0tqIku52W

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1348	b79a4e0b6e426381ddfe209220ec9c8f395e9125535b6056d7322c0dafc55f9d.exe
1348	b79a4e0b6e426381ddfe209220ec9c8f395e9125535b6056d7322c0dafc55f9d.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 1348 wrote to memory of 1740	1348	b79a4e0b6e426381ddfe209220ec9c8f395e9125535b6056d7322c0dafc55f9d.exe	26
PID 1348 wrote to memory of 1740	1348	b79a4e0b6e426381ddfe209220ec9c8f395e9125535b6056d7322c0dafc55f9d.exe	26
PID 1348 wrote to memory of 1740	1348	b79a4e0b6e426381ddfe209220ec9c8f395e9125535b6056d7322c0dafc55f9d.exe	26
PID 1348 wrote to memory of 1740	1348	b79a4e0b6e426381ddfe209220ec9c8f395e9125535b6056d7322c0dafc55f9d.exe	26
PID 1740 wrote to memory of 240	1740	net.exe	28
PID 1740 wrote to memory of 240	1740	net.exe	28
PID 1740 wrote to memory of 240	1740	net.exe	28
PID 1740 wrote to memory of 240	1740	net.exe	28

memory/240-59-0x0000000000000000-mapping.dmp

Download
memory/1348-57-0x0000000074F41000-0x0000000074F43000-memory.dmp

Filesize
8KB

Download
memory/1740-58-0x0000000000000000-mapping.dmp

Download